4 ms·

Click on 'current usage' in your account and it takes you to your current invoice, which is accessible via the URL that he mentions. It appears to be only the c

Click on 'current usage' in your account and it takes you to your current invoice, which is accessible via the URL that he mentions. It appears to be only the current months usage / invoice that is vulnerable.

jcoder 14y ago
EDIT: removing URLs because it's the right thing to do.
- rjsamson 14y ago
  Yikes - so are past invoices available as well then via the show/:id url?