CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources.
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.