CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, watchos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS...5.5 Medium
- open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreAttackers can successfully request arbitrary snippet IDs, including E-Mail signatures of other...6.5 Medium
- unknown upload resume, upload resume project resume +1 moreUpload Resume <= 1.2.0 - Captcha Bypass5.3 Medium
- woocommerce stripe payment gatewayWordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)7.5 High
- tmt lockcell, tmtmakine lockcell firmware +1 moreIDOR in TMT's Lockcell9.8 Critical
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode4.3 Medium
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task6.5 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode4.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode6.5 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode6.5 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode6.5 Medium
- seeddmsAn issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid...8.8 High
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreHelmholz and MB Connect Line: Account takeover via password reset in multiple products8.8 High
- kanboardParameter based Indirect Object Referencing leading to private file exposure in Kanboard4.3 Medium
- mobatime mobile application amxgt100, amxgt 100 +1 moreMobatime mobile application - Broken authorisation8.1 High
- dataeaseDataEase API interface has IDOR vulnerability8.1 High
- google androidIn checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass...7.8 High
- abstrium pydio cellsAbstrium Pydio Cells Change Subscription authorization4.6 Medium
- shopbeat shop beat media player, rockwellautomation studio +1 moreShop Beat Services Vulnerable To IDOR9.1 Critical
- cbot core, panel, chatbot +2 moreIDOR in CBOT's Chatbot8.8 High
- armoli cargo tracking systemIDOR in Armoli Technology's Cargo Tracking System8.8 High
- finex media competition management systemIDOR in Finex Media's Competition Management System8.8 High
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreAuthorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite7.2 High
- rental module project module, unknown rental module +1 moreIDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.9.8 Critical
- wclovers wcfm membership – woocommerce memberships for multivendor marketplace, wcfm membership +1 moreWCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change9.8 Critical
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change6.6 Medium
- easytor, easytor applications applications +1 moreEasyTor Applications – Authorization Bypass8.1 High
- metersphereIDOR vulnerability exists in metersphere6.8 Medium
- newbee-mall project newbee-mallInsecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows...5.4 Medium
- f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 more +4 moreNGINX Management Suite vulnerability8.1 High
- creativethemes blocksy companionBlocksy Companion < 1.8.82 - Subscriber+ Draft Post Access4.3 Medium
- unknown ruby help deskRuby Help Desk < 1.3.4 - Subscriber+ Ticket Update via IDOR6.5 Medium
- unknown wp fevents book, wp fevents book project fevents book +1 moreWP FEvents Book <= 0.46 - Subscriber+ Arbitrary Booking Manipulation via IDOR6.5 Medium
- alf, alfio-event alfio-event/alf.io +1 moreAuthorization Bypass Through User-Controlled Key in alfio-event/alf.io8.8 High
- huawei emui, harmonyos +1 moreThe Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing...6.5 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...7.5 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4,...4.3 Medium
- imaworldhealth bhimaBhima version 1.27.0 allows an attacker authenticated with normal user permissions to view...6.5 Medium
- getnexx nxal-100 firmware, nxg-100b firmware, nxg-200 firmware +4 more +6 moreCVE-2023-17496.5 Medium
- getnexx nxal-100 firmware, nxg-100b firmware, nxg-200 firmware +4 more +6 moreCVE-2023-17507.1 High
- peppermintAn issue in the password reset function of Peppermint v0.2.4 allows attackers to access the...8.1 High
- unknown formidable forms, strategy11 formidable form builder +1 moreFormidable Forms < 6.1 - IP Spoofing6.5 Medium
- hgiga mailsherlock, oaklouds mailsherlock +1 moreHGiga MailSherlock - Broken Access Control5.3 Medium
- wisdomgarden tronclass ilearnWisdomGarden Tronclass ilearn - Broken Access Control6.5 Medium
- dino, debian linux, fedoraproject fedora +2 moreDino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the...7.1 High
- ladybirdweb faveo servicedeskFaveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an...6.5 Medium
- moodleMoodle: users' name enumeration possible via idor on learning plans page4.3 Medium
- vadi digikentIDOR in Digikent8.8 High
- Show moreLoading…