This video explains Insecure Direct Object Reference vulnerability In Shopify GraphQL API reported in hackerone.
Read More