Your API Checks Who Users Are — But Not What They’re Allowed to See
Share

One missing line of code exposes every private wishlist in the store.

 

 One missing line of code exposes every private wishlist in the store.Continue reading on Medium » Read More Hacking on Medium 

#hacking

By ali