Harvest: Unrestricted View to People’s Web Invoices Data without knowing the Unique Hash

Dear Harvest Security Team, To be honest, it’s really hard for me to report this issue without trying to see other user’s data, because in my point of view, this is an issue at the session of the HarvestApp that catchup already by Google Bot. What I would like to say is, I can’t proof yet the iss...