Read the technical documentation and try to design an attack scenario, before deciding that it certainly can be abused