How I Found an IDOR That Exposed Cancer Patient Identities on a Government Healthcare Portal

bug-bounty idor writeup