Nobuaki Nakazawa

The issue allows for a man-in-the-middle (MITM) attack because the application permits non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack.

The issue allows for a man-in-the-middle (MITM) attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a script injected during the attack.