blog.securitybreached.org
IDOR User Account Takeover By Connecting My Facebook Account with victims Account - Security Breached Blog
Blog about an IDOR issue i found in a web where changing user id in FB auth callback request connects my FB account with victims Web Account