BUG BOUNTY REPORT ALERT
Possible Cross-Account Record Access
- Request
- GET /api/orders/77124
- Reporter account
- Customer 310
- Returned owner
- Customer 311
- Response
- HTTP 200
Validate with the smallest controlled test that can confirm authorization behavior.