insecure direct object reference

type of access control vulnerability in digital security