Abstract: Java Web applications are widely used across various industries, however, they are increasingly threatened by Broken Access Control (BAC) vulnerabilities, which may allow unauthorized users ...