Enter: IDOR on remoing Share
Issue In case of Operator Wallets, only Owner has the permission to delete share with any user. But It is possible for any user to delete share for any other user. POC 1. Suppose a wallet BITCOINS is created by user A and shared with user B and C. 2. User B can send the following request and dele...