IDOR: Adding Contacts to Other User Groups

Summary

The request to add a new contact performed insufficient validation on the specified group number. Altering the target group resulted in incrementing license count and disclosure of the name of the group, however access was not granted.