I found a cluster of 4 IDOR write vulnerabilities on a very sensitive endpoint . The findings are documentation based, the vulnerabilities are evidenced by absence of ownership restrictions in the public api Docs, not by confirmed live exploitation (I…