1 CVE of this weakness class.
Exploitation first, with newly exploited CVEs rising above old ones
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.