Authenticated route write using predictable IDs

Description

The application may allow users to modify resources they shouldn’t have access to by guessing predictable IDs.

Rationale

Route might be vulnerable to data tampering.

Remediation

  • Validate that users only have access to their own data (AuthZ).