Excessive Data Exposure is when an API server returns more information than necessary to the API client. This happens when the API client does not filter the data it receives before returning it to the user. This can lead to sensitive data being exposed to the usermore: https://