RAGTAGS

Broken Access Control means the application doesn’t correctly enforce who is allowed to do what. It’s not about logging in - it’s about what users can access after they’re logged in.