Description

Delete any post for all users via IDOR

Proof of Concept

1- Post anything

2- Open Burp Suite to intercept the request

3- When deleting the post, we will notice that there is DELETE /api/memo/1010 in the request, Here the post id will be 1010

4- This number can be changed and any post you want will be deleted

More explanation in a video

https://drive.google.com/file/d/1uaRsJmVkmpHM0YXm3WirXNWQKXkkRCcK/view