Broken Authentication and IDOR - Check this one out on Inspectiv.com

Broken Authentication and IDOR – A Big but Solvable Problem