Tech, Software Development, Coding, Security, Review.
APIs directly expose database indexes (which in itself is very bad practice), attackers can manipulate these indexes and access unauthorized data (e.g.: retrieve all the database records). Moreover, user management, which is normally delegated to a third-party application, is most of the times