Restrictions on what authenticated users are allowed to do are not properly enforced.
No relationships mapped yet.
OWASP Foundation. (2021). OWASP Top 10:2021. https://owasp.org/Top10/