Exploiting a mass assignment vulnerability

In Burp’s browser, log in to the application using the credentials: