
My First Bounty $3,000 (P1 Critical) - An IDOR that Broke the entire Access Control of an Application's Infrastructure
Intro: Before this story begins… Starting with this write-up, I’d like to write a few words about this finding and its history. Around August 2023, I met a person who is currently a big friend an...