Description

No authentication was detected for an API route that handles user invitations, which may expose your application to potential security risks.

A malicious actor could abuse this endpoint to send unauthorized invitations, potentially leading to account enumeration, spamming, or social engineering attacks.

Remediation

• Validate that the code isn’t expecting the user to be authenticated to have access to this resource (AuthN). If this API is in fact authenticated, ensure your code is instrumented correctly.
• To improve authentication detection, you can configure custom authentication detection via the Endpoint Tagging Rules settings.