Sale cancellations from other sellers without restrictions

Summary

We thank @capablanca0 for the report and for providing clear reproduction steps with a proof-of-concept code demonstrating the vulnerability. MercadoLibre acknowledged the issue and worked on a fix internally.

An attacker was able to cancel all MercadoLibre sales. I think I saved a few million 😉😎