Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
frappe frappe
frappe frappe 13.0.0