Excessive Data Exposure Leading to Unauthorized Access to Paid Features

How a Single API Response Led to Full Paid Access