In one of the recent Pentest, I was testing APIs and came across this fancy vulnerability name Expression Language (EL) Injection reported by Burpsuite (Thanks to portswigger for making this beautiful tool) Read more about EL Injection here [https://portswigger.net/kb/issues/00100f20_expression-language-injection] So I injected payload ${\"