CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- oretnom23 computer laboratory management systemSourceCodester Computer Laboratory Management System save_users improper authorization5.4 Medium
- upqode whizzyWordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- ricard torres thumbs ratingWordPress Thumbs Rating plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- metagauss profilegridWordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- fit2cloud jumpserverJumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked4.6 Medium
- fit2cloud jumpserverJumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality4.6 Medium
- molonguiWordPress Molongui Authorship plugin <= 4.7.7 - Insecure Direct Object References (IDOR) vulnerability2.7 Low
- grafanaUsers outside an organization can delete a snapshot with its key6.5 Medium
- hackerbay oneuptimeOneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation8.3 High
- zkteco biotimeAn issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive...6.5 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePermalink Manager <= 2.4.3.1 - Missing Authorization to Authenticated(Author+) Arbitrary Post Slug Modification5.4 Medium
- bmc control-mIncorrect authorization in BMC Control-M6.4 Medium
- oretnom23 employee task management systemSourceCodester Employee Task Management System update-employee.php authorization7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System update-admin.php authorization7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System task-details.php authorization7.3 High
- oretnom23 employee task management systemSourceCodester Employee Task Management System edit-task.php authorization7.3 High
- carrier masmobile classic, mas asp.net services, honeywell masmobile asp.net services +1 more +3 moreMAS (a Carrier brand) MASmobile Classic Authorization Bypass6.5 Medium
- kbjohnson90 user shortcodes plusUser Shortcodes Plus <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via user_meta Shortcode4.3 Medium
- bitapps contact form builder, bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builder +1 moreContact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration5.3 Medium
- feedwordpress project feedwordpressFeedWordPress <= 2022.0222 - Insecure Direct Object Referece5.3 Medium
- webkul bagistoBagisto vulnerable to Insecure Direct Object Reference (IDOR)6.5 Medium
- fortinet fortios, fortiproxy +1 moreAn authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7...7.2 High
- go-zeroAuthorization Bypass Through User-Controlled Key in go-zero9.1 Critical
- jeroensormani wp dashboard notesWPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes4.3 Medium
- netiq client login extension, opentext netiq client login extension +1 moreElevation of Privilege attack on NetIQ Client login extension7.1 High
- fedoraproject fedora, moodle +1 moreMsa-24-0006: idor on dashboard comments block3.5 Low
- suse manager server module 4.3Insecure handling SSH key in SUSE Manager when bootstrapping new clients6.4 Medium
- dell e-lab navigator, mobility - e-lab navigator +1 moreDell E-Lab Navigator, [3.1.9, 3.2.0], contains an Insecure Direct Object Reference Vulnerability...4.4 Medium
- ellucian bannerEllucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to...6.5 Medium
- mappresspro mappress maps for wordpressMapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure5.3 Medium
- simgesel hearing tracking systemIDOR in Simgesel Software's Hearing Tracking System (Barosel)8.8 High
- mia technology mia-medIDOR in Mia Technology's Mia-Med8.8 High
- ncr terminal handlerAn issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a...6.5 Medium
- cifi starbox – the author box for humans, squirrly starbox +1 moreStarbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object Reference4.3 Medium
- webfactory minimal coming soon – coming soon page, webfactoryltd minimal coming soon \& maintenance mode +1 moreMinimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass3.7 Low
- josevega display custom fields in the frontend – post and user profile fields, display custom fields in the frontend - post and user profile fields +1 moreDisplay custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure4.3 Medium
- ali forms contact form builder with drag & drop for wordpress – kali forms, kaliforms kali forms +1 moreWordPress Contact Form builder with drag & drop - Kali Forms Plugin <= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR)7.5 High
- relevanssi, unknown relevanssi premium +1 moreRelevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure5.3 Medium
- modernasistemas modernanet hospital management system 2024The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure...7.5 High
- unknown wp user profile avatar, wp event manager user profile avatar +1 moreWP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR4.3 Medium
- idmsistemas sinergia, sinergia, sinergia 2.0, and sinergia corporativo +1 moreOmission of key-controlled authorization in Qsige6.5 Medium
- avaya aura experience portal, experience portal manager +1 moreAvaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities5.7 Medium
- webkul qloappsAn issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via...6.5 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.2.1 - Subscriber+ Account Address Leak6.5 Medium
- clerk javascript@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)9.1 Critical
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode4.3 Medium
- wpexperts post smtp, saadiqbal post smtp – complete email deliverability and smtp solution with email logs, alerts, backup smtp & mobile app +1 morePOST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API9.8 Critical
- melapress wp 2fa – two-factor authentication for wordpress, wpwhitesecurity wp 2fa +1 moreWP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending4.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.5.7 - Insecure Direct Object Reference to Information Disclosure4.3 Medium
- rocklobster contact form 7, sevenspark contact form 7 – dynamic text extension +1 moreContact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference4.3 Medium
- Show moreLoading…