An attacker may modify the URL to discover sensitive information about the target network.
CWE-200, NVD-CWE-noinfo