IDOR and Missing Authorization leads to free content

As a security researcher, you can’t really turn off your mind when browsing websites. At least I can’t. I’m always asking myself “What would happen if…?”

That’s what led me to find this easy to exploit vulnerability in an application that I used every week. Let’s get down to it.