Mail.ru: [city-mobil.ru/taxiserv/] IDOR leads to driver account takeover

IDOR vulnerability allowed partner account with manager role to takeover driver's accounts belonging to different partner...