CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- fortinet fortiportalAn Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal...4.9 Medium
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate...8.8 High
- oretnom23 clinic queuing systemSourceCodester Clinic Queuing System LoginRegistration.php authorization7.3 High
- automattic woocommerce stripe, woocommerce stripe payment gateway +1 moreWordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)7.5 High
- hcl software dryice myxalyticsInsecure Direct Object Reference (IDOR) affects DRYiCE MyXalytics7.1 High
- floorsightsoftware customer portalAn indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal...7.5 High
- floorsightsoftware insightAn issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an...7.5 High
- automattic woopayments, woopayments – fully integrated solution built and supported by woo +1 moreWordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)5.9 Medium
- metersphereMeterSphere horizontal privilege escalation vulnerability of resources in project scope.4.3 Medium
- github enterprise serverImproper access control in all versions of GitHub Enterprise Server allows unauthorized users to...5.3 Medium
- blaz k. rate my post – wp rating system, blazzdev rate my post +1 moreWordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)4.3 Medium
- kainelabs youzify, youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 moreWordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)6.5 Medium
- woocommerce shipping multiple addressesWordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)6.5 Medium
- automattic woocommerce bookings, woocommerce bookings +1 moreWordPress WooCommerce Bookings Plugin <= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR)5.4 Medium
- automattic woocommerce subscriptions, woocommerce woo subscriptions +1 moreWordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)7.5 High
- automattic woopayments, woopayments – fully integrated solution built and supported by woo +1 moreWordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)7.5 High
- automattic woocommerce square, woocommerce square +1 moreWordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)8.1 High
- marketing fire editorial calendarWordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)5.4 Medium
- automattic woocommerce gocardless, woocommerce gocardless +1 moreWordPress WooCommerce GoCardless Gateway Plugin <= 2.5.6 is vulnerable to Insecure Direct Object References (IDOR)8.2 High
- jordy meow photo engine (media organizer & lightroom), meowapps photo engine +1 moreWordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)5.4 Medium
- sunshinephotocart sunshine photo cart: free client galleries for photographers, sunshine photo cart +1 moreWordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)5.3 Medium
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreWordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)2.7 Low
- eurotel etl3100, etl3100 firmware +1 moreAuthorization Bypass Through User-Controlled Key in EuroTel ETL31007.5 High
- sound4 ltd. streamWordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)4.3 Medium
- j.n. breetvelt a.k.a. opajaap wp photo album plusWordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)5.3 Medium
- mattermost, mattermost server +1 moreInaccessible Post Information Leak via Run Timeline IDOR6.5 Medium
- sap cloud-security-client-go, sap se github.com/sap/cloud-security-client-go +1 moreEscalation of Privileges in SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go)9.1 Critical
- sap cloud-security-services-integration-libraryEscalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)9.1 Critical
- sap se @sap/xssec, sap \@sap\/xssec +1 moreEscalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec)9.1 Critical
- archerirm archerArcher Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference...7.5 High
- catalis cms360Catalis CM360 allows authentication bypass5.3 Medium
- getshortcodes shortcodes ultimate, gn themes wp shortcodes plugin — shortcodes ultimate +1 moreWP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure4.3 Medium
- openzfsOpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that...7.5 High
- sysaidSysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a...6.5 Medium
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows...5.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user4.3 Medium
- armanidrisi dev blog, dev blog blog +1 moreDev Blog v1.0 - ATO9.1 Critical
- os4ed opensisAn Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of...7.5 High
- emudhra emsignerInsecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized...6.5 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle: stored xss and potential idor risk in wiki comments6.5 Medium
- asyncssh project asyncsshAsyncSSH Rogue Session Attack6.8 Medium
- silbersaiten order duplicatorIn the module "Order Duplicator " Clone and Delete Existing Order" (orderduplicate) in version <=...8.8 High
- wisdomgarden tronclass ilearnWisdomGarden Tronclass ilearn - Path Traversal6.5 Medium
- oretnom23 lost and found information systemLost and Found Information System 1.0 allows account takeover via username and password to a ...9.8 Critical
- minicalAn issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted...8.8 High
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease5.3 Medium
- gvectors wpdiscuz, advancedcoding comments – wpdiscuz +1 morewpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decrease5.3 Medium
- etsi tetra standard, midnightblue tetra\ +1 moreDCK pinning attack in TETRA7.5 High
- etsi tetra standard, midnightblue tetra\ +1 moreKeystream recovery for arbitrary frames in TETRA8.8 High
- automattic activitypubActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure4.3 Medium
- Show moreLoading…