Unprotected admin functionality with unpredictable URL 1 Access Control Vulnerabilities Lab 2 Dec 4, 2024