[www.zomato.com] IDOR - Gold Subscription Details, Able to view "Membership ID" and "Validity Details" of other Users

The following URL : https://www.zomato.com/gold/payment-success?subscription_id=██████████&user_id=█████████ is vulnerable to IDOR in `subscription_id` field. Anyone can get Subscription Start & End Date and Plan Duration of a Membership ID just by changing the `subscription_id` parameter. {F291153}