Scan findings "REST Web Services writing data directly" after scanning the update set?

[Joshua Prakash]

I have created a scripted REST API endpoint through which a third party application can update the incident (Ex: additional comments, state, urgency etc..,)

Can anyone explain the issue here?

Please check the attachments below