IDOR and Broken Access Control — Roadmap Step & Resources

Accessing another user's data just by changing an ID or URL parameter

Open on Cached Info