My open-source experience

The author identified an authorization flaw in BookCars where a supplier could alter another supplier’s booking status, documented it, and reflected on the need