https://portswigger.net/web-security/access-control

https://www.bugbountyhunter.com/hackevents/report?id=221