@SrikanthPo3
If the servlet is registered with a resource type and is publicly accessible, any user with knowledge of the endpoint can make requests to it, regardless of the client used (e.g., jQuery AJAX, Postman, etc.)
There are multiple ways you can secure your form submits.
I would say one of...