{"endpoint": "NoSQL Injection via POST Body", "method": "POST", "content_type": "application/json", "parameters": {"collection": "products | users", "query": "object"}, "cwe": "CWE-943", "owasp": "A03:2021 - Injection"}