5 ms·

EDIT: removing URLs because it's the right thing to do.

• rjsamson 14y ago
  Click on 'current usage' in your account and it takes you to your current invoice, which is accessible via the URL that he mentions. It appears to be only the current months usage / invoice that is vulnerable.
  • jcoder 14y ago
    EDIT: removing URLs because it's the right thing to do.
    • rjsamson 14y ago
      Yikes - so are past invoices available as well then via the show/:id url?