OvulaRing web application version 4.2.2 suffers from a broken object level authorization vulnerability.