Unauthorized Canceling/Unsubscribe TaxJar account & Payment information DIsclosure

Summary

@mr_asg discovered that users of an account with member permissions were improperly allowed to view certain subscription details and cancel the subscription for that account.

I discovered a Vulnerability that allows the user who has member privileges to unsubscribe (Cancel) the account instead of the admin, and without any interaction from the victim by accessing https://app.taxjar.com/account/subscription/cancel .