A customer opens their dashboard and sees another company’s invoices. Nobody needed to break in. An endpoint returned data it should never have returned.

Source: [Dev.to](https://dev.to/bootsaas/one-missing-where-clause-can-expose-another-customers-data-2n0c)

Sponsored