4 ms·

Those flaws were all over their entire codebase in very basic parts of the site's functionality. They had literally zero authorization checks.