API4:2023 — Unrestricted Resource Consumption
Verified by Precogs Threat Research
What is Unrestricted Resource Consumption in APIs?
APIs that don't limit the number of requests, payload sizes, or resources consumed per client. Missing rate limiting, no pagination limits, uncapped file uploads, and unbounded batch operations.
Impact
Enables denial of service, cost inflation on pay-per-use APIs, and data exfiltration through overly large response payloads.