Owasp classifies this as an issue, our pentesting picked this up and we do not have any instruments to actually fix this:
