BOLA in ASP.NET Core: Why Authenticated Users Can Still Read Someone Else's Data

DEV Community

BOLA in ASP.NET Core: Why Authenticated Users Can Still Read Someone Else's Data

A pentest report came back with a finding rated "high": change the invoiceId in GET...

A pentest report came back with a finding rated "high": change the invoiceId in GET...