Mail.ru: [https://city-mobil.ru/taxiserv] IDOR leads to information disclosure

IDOR vulnerability for orders report allowed partner's superuser account to access information related to different partners...