Broken Access Control + Misconfiguration = Beautiful Privilege Escalation

Hello everyone, This story will be about the Privilege escalation vulnerability I found lately. There are 2 roles on this site creator/account owner Account owner user is the management and is able to access the full account users and other function...