on 204 response, what will be impact? Because there will no data in response. Even though if it's vulnerable then what type of information it'll disclosed. If there's nothing in response body except Headers. Will you elaborate some impact?