Privilege escalation 4 User ID controlled by request parameter Jun 2, 2024 User ID controlled by request parameter, with unpredictable user IDs May 16, 2024 Unprotected admin functionality With unpredictable URL May 15, 2024 Unprotected admin functionality May 14, 2024