05982dbc_OWASP_and_Theatre_Manager__Description
[0] A10 Web applications frequently redirect and forward users to other pages and websites, and use untrusted data to determine the destination pages. Without proper validation, attackers can redirect victims to phishing or malware sites, or use forwards to access unauthorized pages. Theatre Manager does not use redirects to any unknown source in any commerce web page. All URLs returned by the server are specific to each API. Requests for APIs that do not exist return a proper 404 HTTP response (not found) [Description] 
Unvalidated Redirects and Forwards
OWASP and Theatre Manager
Description