Iamkhanraheel

Improper authorization checks allow authenticated employees to bypass permissions and view expense advance details of other employees. This is achieved by querying the Expense Claim Advances API, which exposes sensitive financial information.