CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- gvectors wpdiscuz, gvectors team comments – wpdiscuz (wordpress plugin) +1 moreWordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in...5.3 Medium
- liferay portal, digital experience platform +1 moreAuthorization Bypass in Liferay Portal4.3 Medium
- gitlabIncorrect authorization during display of Audit Events in GitLab EE affecting all versions from...4.3 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability6.3 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Insecure direct object references (IDOR) vulnerability5.4 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities2.7 Low
- fortinet fortimailAn improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4...5.4 Medium
- m-files hubshareBroken access controls on PDFtron data in M-Files Hubshare8.2 High
- vmware spring security, netapp active iq unified manager +1 moreSpring Security authorization rules can be bypassed via forward or include dispatcher types9.8 Critical
- solarwinds orion platform, platform +1 moreInsecure Direct Object Reference Vulnerability: Orion Platform 2020.2.65.4 Medium
- adobe commerce, magento +1 more[CVE-2021-36032] Magento IDOR Leads to Account Takeover8.8 High
- pivotal software concourseTeam scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution5.4 Medium
- nopcommerceAn access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any...7.5 High
- devexpress asp.net web forms controlsThe DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19...7.5 High
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6...3.5 Low
- codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 moreDrag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass4.3 Medium
- oretnom23 online birth certificate management systemOnline Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object...4.3 Medium
- octopus serverIn affected versions of Octopus Server it is possible to reveal information about teams via the...6.5 Medium
- quizandsurveymaster quiz and survey master, expresstech quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability3.8 Low
- 10up restricted site accessRestricted Site Access < 7.3.2 - Access Bypass via IP Spoofing5.3 Medium
- hashicorp vaultHashiCorp Vault vulnerable to incorrect metadata access9.1 Critical
- freehtmldesigns site offline, unknown site offline or coming soon or maintenance mode +1 moreSite Offline < 1.5.3 - Access Bypass4.3 Medium
- login no captcha recaptcha project no captcha recaptcha, unknown login no captcha recaptcha +1 moreLogin No Captcha reCAPTCHA < 1.7 - IP Check Bypass4.3 Medium
- creativemotion titan anti-spam & security, cm-wp titan anti-spam \& security +1 moreTitan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing5.3 Medium
- airties air 4920 firmware, air 4921 firmware, air 4971 firmware +2 moreAn issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change...9.1 Critical
- eigen\&wijzer ouderapp project ouderappWeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted...7.5 High
- squiz matrixSquiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to...5.3 Medium
- doctor\'s appointment system project appointment systemDoctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient...9.8 Critical
- automattic sensei lms, sensei lms – online courses, quizzes, & learning +1 moreSensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR4.3 Medium
- automattic sensei lmsSensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API5.3 Medium
- tooljet, tooljet tooljet/tooljet +1 moreImproper Access Control in tooljet/tooljet7.1 High
- student result or employee database project result or employee database, unknown student result or employee database +1 moreStudent Result or Employee Database < 1.7.5 - Stored Cross Site Scripting via CSRF5.4 Medium
- 2code wpqa builderWPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR4.3 Medium
- tabitTabit - Excessive data exposure6.3 Medium
- tabitTabit - sensitive information disclosure4.6 Medium
- mealieMealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR)...6.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemr8.8 High
- searchwp live ajax search, unknown searchwp live ajax search +1 moreSearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure5.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemr6.5 Medium
- unknown wsm downloader, wsm downloader project downloader +1 moreWSM Downloader <= 1.4.0 - Domain Name Restriction Bypass7.5 High
- michlol - rashim web, rashim michlol +1 moreMichlol - rashim web interface Insecure direct object references (IDOR)6.3 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0...3.5 Low
- storeapps affiliate for woocommerce, affiliate for woocommerce (wordpress plugin) +1 moreWordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change6.4 Medium
- unknown yop poll, yop poll +1 moreYOP Poll < 6.4.3 - IP Spoofing5.3 Medium
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key6.5 Medium
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key7.1 High
- hypr serverInsecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote...7.5 High
- wpusermanager wp user manager, unknown wp user manager – user profile builder & membership +1 moreWP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise7.5 High
- octopus serverIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists...5.3 Medium
- Show moreLoading…