Thanks, I've done that now, hopefully you can find my submission I did put 'security vulnerability' as the top line in the body. If that doesn't narrow it down search for 1635976 also in the body.

It's an either an information disclosure issue or an authorization issue (depending on your point of view), I won't say more on here.