I’ve accidentally found an Insecure Direct Object Reference (IDOR) vulnerability on DailyMotion while helping my friend to manage his uploaded video 😉

A nice $700 bounty came up days after!