We have an API server hosted with amazon elb. The server has only one virtual host and hence it doesn't enforce
Host header. But if we manually add a
Host header along with the request with a valid host name, the server returns a success.
Is there any possibilities by which this can be exploited in general?
Is it usually recommended to use a
Host header with every request?