ParentOf	Base	551	Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
ParentOf	Base	639	Authorization Bypass Through User-Controlled Key
ParentOf	Variant	647	Use of Non-Canonical URL Paths for Authorization Decisions
ParentOf	Base	804	Guessable CAPTCHA