CRITICAL vulnerability - Insecure Direct Object Reference - Unauthorized access to `Videos` of Channel whose privacy is set to `Private`.

This time I found a IDOR(Insecure Direct Object Reference) vulnerability. It allows an attacker to get unauthorized access to `Videos` of Channel whose privacy is set to `Only moderators and people I choose` without being a member. In simple words, we can access videos of private channel without …