Broken Function Level Authorization

A vulnerability where API endpoints fail to properly enforce authorization checks, allowing users to access administrative functions.