Possible IDOR in invoice API

[hail0hydra]

Endpoint:

/api/v2/invoice/123

Need:

• verify horizontal access
• verify vertical access
• check mass assignment

Pentester:

Bob

Status:

Testing

[hail0hydra]

Correct! it exists!

But it is duplicate