CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- medialize medialize/uri.js, uri.js project uri.js, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in medialize/uri.js5.3 Medium
- scratchoauth2 project scratchoauth2An authorization bypass exploited by a user-controlled key in SpecificApps REST API in...6.5 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse8.8 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreImproper Privilege Management in chatwoot/chatwoot6.5 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreExposure of Sensitive Information in Grafana4.3 Medium
- ip2location country blocker, unknown ip2location country blocker +1 moreIP2Location Country Blocker < 2.26.5 - Ban Bypass6.5 Medium
- servisnet tessaAn issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an...9.8 Critical
- classapps selectsurvey.netA file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET...7.5 High
- synametrics synamanAn insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0...7.5 High
- saviynt enterprise identity cloudAn issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can...5.3 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreAuthorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat6.5 Medium
- deltarm delta rmAn issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking...4.3 Medium
- hp designjet t1530 l2y23a firmware, designjet t1530 l2y24a firmware, designjet t1530 l2y24b firmware +24 more +26 moreCertain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow...7.5 High
- weseek growi, weseek/growi +1 moreAuthorization Bypass Through User-Controlled Key in weseek/growi6.3 Medium
- telesquare tlr-2005ksh firmwareTLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled...9.8 Critical
- carinal tien hospital health report system, cth carinal tien hospital health report system +1 moreCarinal Tien Hospital Health Report System - Authorization Bypass Through User-Controlled Key7.3 High
- online enrollment management system project enrollment management systemhttps://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source...6.5 Medium
- shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 moreLogo Carousel < 3.4.2 - Unauthorised Private Post Access8.1 High
- patrowl patrowlmanagerImproper Privilege Management in Patrowl7.5 High
- seafile server, haiwen seafile-server +1 morePermissions check bypass in Seafile7.4 High
- glfusionglFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php.9.8 Critical
- gitlabImproper access control allows any project member to retrieve the service desk email address in...4.3 Medium
- gitlabLack of an access control check in the External Status Check feature allowed any authenticated...4.3 Medium
- elgg, elgg elgg/elgg +1 moreAuthorization Bypass Through User-Controlled Key in elgg/elgg4.3 Medium
- kevinpapst kevinpapst/kimai2, kimai2 project kimai2 +1 moreImproper Access Control in kevinpapst/kimai26.5 Medium
- dell emc streaming data platformDell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference...6.5 Medium
- advanced forms project forms, todo advanced forms, advanced forms ppro +2 moreAdvanced Forms < 1.6.9 - Subscriber+ Arbitrary User Email Address Update via IDOR8.8 High
- concretecms concrete cmsExposure of sensitive information in concrete5/core7.5 High
- concretecms concrete cmsPassword exposure in concrete5/core7.5 High
- height8tech h8 ssrmsInsecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to...6.5 Medium
- codesupply squaretypeSquaretype Modern Blog < 3.0.4 - Unauthenticated Private/Schedule Posts Disclosure5.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...7.5 High
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to...7.5 High
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to...7.5 High
- nextcloud deck, kiteworks security-advisories +1 moreMissing permission check on Deck API8.1 High
- yellowfinbi yellowfinIn Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an...7.5 High
- yellowfinbi yellowfinIn Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through...7.5 High
- yellowfinbi yellowfinIn Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed...5.4 Medium
- mitsubishi electric corporation melsec iq-r series safety cpu r08sfcpu, melsec iq-r series safety cpu r120sfcpu, melsec iq-r series safety cpu r16sfcpu +21 more +23 moreAuthorization bypass through user-controlled key vulnerability in MELSEC iQ-R series Safety CPU...9.1 Critical
- sylius paypal, paypalplugin +1 moreUnauthorized access to Credit card form in sylius/paypal-plugin7.5 High
- gitlabIn all versions of GitLab EE since version 14.1, due to an insecure direct object reference...4.3 Medium
- convoypanel panelAuthentication bypass in Pterodactyl8.1 High
- gilacms gila cmsGila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by...7.5 High
- bookingcore booking coreLaravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the...5.3 Medium
- 3xlogic infinias access controlAn issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting...8.8 High
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 moreECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor9.8 Critical
- ecoa ecs router controller ecs (flash), ecs router controller-ecs firmware, graphic control software +6 more +8 moreECOA BAS controller - Improper Access Control8.8 High
- stylemixthemes ulisting, ulisting (wordpress plugin) +1 moreWordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability7.1 High
- ibm security guardiumIBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain...5.4 Medium
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +10 more +12 moreWindows Key Storage Provider Security Feature Bypass Vulnerability6.5 Medium
- Show moreLoading…