HackerOne disclosed on HackerOne: Insecure Direct Object Reference...

**Summary:** Hi Team, I think I can delete any Campaigns based on campaign_id ### Steps To Reproduce Follow the POST request below ```` POST /graphql HTTP/2 Host: hackerone.com Cookie: yourcookie User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 Acce…