Unrestricted Resource Consumption 4 API-7: Server-Side Request Forgery (SSRF) Dec 20, 2025 API-6: Unrestricted Access to Sensitive Business Flows Dec 20, 2025 API-5: Broken Function Level Authorization (BFLA) Dec 19, 2025 API-4: Unrestricted Resource Consumption Dec 18, 2025