Product
An IDOR vulnerability in the Dolibarr expense report API allows authenticated users with minimal privileges to access and manipulate payment records belonging to other users.