Pen Test Partners: Anyone could view Gumtree users' GPS location by pressing F12
And online flea market had IDOR in an iOS-focused API UK online used goods bazaar Gumtree exposed its users' home addresses in the source code of its webpages, and then tried to squirm out of a bug bounty after infosec bods alerted it to the flaw....