Access Control 7

• Referer-based access control Jul 4, 2024
• User ID controlled by request parameter with data leakage in redirect Jul 3, 2024
• User ID controlled by request parameter Jun 2, 2024
• User Role Controlled By Request Parameter May 24, 2024
• User ID controlled by request parameter, with unpredictable user IDs May 16, 2024
• Unprotected admin functionality With unpredictable URL May 15, 2024
• Unprotected admin functionality May 14, 2024