Mail.ru: [api-site.city-mobil.ru] Improper access control leads to information disclosure

Authorization for api-site.city-mobil.ru endpoint was not properly checked, allowing to obtain data about arbitrary corporate.city-mobil.ru orders and users. Find a way to bypass a bad fix for 772118. https://api-site.city-mobil.ru is the same API as https://c-api.city-mobil.ru...