Hacker News new | ask | show | jobs
by sprt 2603 days ago
It's at least a user enumeration issue
1 comments

Why? what's the actual issue? If you have access to it, wouldn't you know the id anyways?
It leaks information about the company - for example, you can see precisely how many documents have been created over x days