Description

The application may allow users to modify resources they shouldn’t have access to by guessing predictable IDs.

Rationale

Route might be vulnerable to data tampering.

Remediation

• Validate that users only have access to their own data (AuthZ).