Discussion on "IDOR in Government Ownership API Exposed Private Business Owner PII via CR Number Enumeration"

Abdulaziz Saad · 2026-05-21T17:05:44.438Z

Severity: HighBounty Awarded: $1,506Program: Private Bug BountyPlatform: Bugbounty.sa Some IDORs are obvious immediately. You change an ID. Someone else’s data appears. Easy. Others look harmless at f

Discussion on "IDOR in Government Ownership API Exposed Private Business Owner PII via CR Number Enumeration" | Hashnode

Search Hashnode

IDOR in Government Ownership API Exposed Private Business Owner PII via CR Number Enumeration

Responses