Changing an ID in a request and receiving someone else's data is the most common serious API flaw. It requires…