Numeric identifiers are distinct numerical values linked to objects, resources, or records within a system. They serve the purpose of uniquely identifying and accessing particular items or data within a database or application, and they are typically organized sequentially.
This rule applies at the API Specification level (OAS/Swagger).
Information Leakage: Numeric IDs might inadvertently reveal information about the system or other users. For instance, if user IDs are sequential and start from 1, an attacker can infer the number of users registered on the platform by trying higher IDs until they receive a "user not found" response.
