Critical IDOR - Get venue data of any organization remotely

How it was found

Hello Team,

I have found a critical IDOR vulnerability which allows an attacker to get venue data of any organization remotely by just changing the venue_id.

Proof of Concept: Please find the attached screenshots.

Best Regards,

Hely H. Shah