HackerOne Bug Bounty Disclosure: public-postman-api-collection-leaks-internal-access-to-https://assets-paris-dev-codefi-network/bypolem4rch