Advisories for Maven/Org.geoserver/Gs-Rest package

It is possible to bypass the default REST API security and access the index page.

The Coverage rest api /workspaces/{workspaceName}/coveragestores/{storeName}/{method}.{format} allow to upload file with a specified url (with {method} equals 'url') with no restrict.