#4 - Webtune App - IDOR
The url params for songs is based on the song ID which are auto increment. Even the songs are public, it is better if the songs is not enumerable
The url params for songs is based on the song ID which are auto increment. Even the songs are public, it is better if the songs is not enumerable