Multiple choice technology security

Identify the line on which the vulnerability exists:

1 public class performSearchAction extends HttpServlet{ 
2 // Servlet for Search Action  
3  public void doPost(HttpServletRequest req, HttpServletResponse res)  
4  { 
5   try 
6   { 
7       ArrayList arrSearch =  Util.performSearchAction(req, res); 
8       req.setAttribute(“SearchResults”,arrSearch); 
9       RequestDispatcher rd = getServletContext().getRequestDispatcher("/SearchResult.jsp"); 
10      rd.forward(req,res); 
11  } catch (Exception e) { 
12               log.debug(“Exception occurred:”+e); 
13               } 
14  } //End of doPost method 
15  public void doGet(HttpServletRequest req, HttpServletResponse res) 
16  { 
17    doPost(req,res); 
18  } //End of doGet method 
19 } //End of Class

  1. Line # 12

  2. Line # 9

  3. Line # 17

  4. Line # 8

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Line 17 delegates doGet requests directly to doPost. Accepting state-changing requests (like search or database queries) via GET requests without CSRF protection exposes the system to Cross-Site Request Forgery or caching issues. However, the question lacks clear security context, making it potentially controversial.