Urgent : Unauthorised Access to Media content of all Direct messages and protected tweets(Indirect object reference)

You can tweet from your ad account while creating a campaign.When you add a media content from your computer and upload it there is a Json request which gives you the link of your media(Photos) to preview before Tweeting.This link is Vulnerable to IDOR Attack and it leads to disclose all the media …