CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- withknown knownKnown v1.3.1 contains Insecure Direct Object Reference4.3 Medium
- kiteworks security-advisories, nextcloud mail +1 moreOwnership check missing when updating or deleting mail attachments in Nextcloud mail5.4 Medium
- priority web, priority-software priority +1 morePriority - Priority web Insecure direct object references (IDOR)5.5 Medium
- candlepinproject candlepinThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 Medium
- gitlabAn access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5...5.0 Medium
- marvalglobal marval msmMarval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low...8.8 High
- ionicabizau ionicabizau/parse-path, parse-path project parse-path +1 moreAuthorization Bypass Through User-Controlled Key in ionicabizau/parse-path6.5 Medium
- projectsendProjectSend information disclosure3.5 Low
- unknown wp-emailWP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing7.5 High
- razormist online discussion forum siteAn issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated...7.5 High
- unknown iq block countryiQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing7.5 High
- ihb-eg fn2webAn Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016...4.3 Medium
- jupyter oauthenticatorAuthorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator4.2 Medium
- emicklei emicklei/go-restful, go-restful project go-restful, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in emicklei/go-restful9.3 Critical
- fedoraproject fedora, redhat 389 directory server, directory server +1 more +3 moreAn access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that...7.5 High
- online market place site project market place siteAn insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to...4.3 Medium
- automotive shop management system project shop management systemIn oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR ...9.8 Critical
- publify publify/publify, publify project publify +1 moreAuthorization Bypass Through User-Controlled Key in publify/publify9.9 Critical
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability6.3 Medium
- nextcloud deck, kiteworks security-advisories +1 morePossibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck5.0 Medium
- 2code wpqa builder, unknown wpqa builder plugin +1 moreWPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOR4.3 Medium
- cdsoft winhotel.mxonlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive...5.3 Medium
- gitlabDue to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions...5.3 Medium
- phpgurukul bus pass management systemAn insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass...6.5 Medium
- lmsdoctor 2 factor authenticationLMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure...7.5 High
- shopizerShopizer - IDOR delete superadmin6.5 Medium
- keycloakKeycloak vulnerable to privilege escalation on Token Exchange feature9.8 Critical
- designwall dw question \& answer, unknown dw question answer pro +1 moreDW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOR4.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreNon Privilege User can Enable or Disable Registered in openemr/openemr8.1 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can View Patient’s Disclosures in openemr/openemr8.3 High
- tylertech odyssey portalAn Insecure Direct Object Reference issue exists in the Tyler Odyssey platform before 17.1.20....7.5 High
- kentico xperienceKentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an...4.9 Medium
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance Control Center: Information disclosure vulnerability in crafted URL7.4 High
- sma sunny tripower firmwareInsecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to...8.1 High
- orangehrmOrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony...4.3 Medium
- plugin-planet blackhole for bad botsBlackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing9.1 Critical
- ibm partner engagement manager, sterlingpartner engagement manager +1 moreIBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to...5.4 Medium
- rsa archerIn RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to...6.5 Medium
- wowonderWoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access...5.3 Medium
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files...7.5 High
- ayecode userswp, unknown userswp – user registration & user profile +1 moreUsersWP < 1.2.3.1 - Subscriber+ User Avatar Override4.3 Medium
- open-emr openemrAn Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any...8.1 High
- pagerduty rundeckAuthorization Bypass Through User-Controlled Key in Rundeck6.4 Medium
- 1byte copy9, exactspy, fonetracker +6 more +8 moreThe backend infrastructure shared by multiple mobile device monitoring services does not...7.5 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Access Control (IDOR) in dolibarr/dolibarr5.4 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse6.5 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse6.5 Medium
- mittwald varnishcacheAn issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site...5.3 Medium
- ibexa ez platform kernelExposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel5.3 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse6.5 Medium
- Show moreLoading…