CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- buddyboss platform, unknown buddyboss-platform +1 moreBuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR4.3 Medium
- buddyboss, unknown buddyboss-platform +1 moreBuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment5.3 Medium
- g5plus essential real estateEssential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion4.3 Medium
- mattermost, mattermost server +1 morePlaybook run link to private channel grants channel access5.9 Medium
silverstripe/frameworkPackagistSilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation6.5 Medium- gitlabAuthorization Bypass Through User-Controlled Key in GitLab4.4 Medium
- google lookerInsecure Direct Object Reference In Looker6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Synchronization in lunary-ai/lunary7.1 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary8.3 High
- trellix epolicy orchestratorePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct...4.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.0 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Course Deletion6.5 Medium
- bonitasoft bonita webBonitasoft Runtime Community edition's contains an insecure direct object references vulnerability6.5 Medium
- fortinet fortivoiceAn authorization bypass through user-controlled key vulnerability [CWE-639] in...6.7 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System admin_class.php improper authorization5.3 Medium
- campcodes online laundry management systemCampcodes Online Laundry Management System HTTP Request Parameter manage_user.php resource injection5.3 Medium
- globitel speechlogGlobitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR)...7.5 High
- smartypants sp project & document managerSP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update4.3 Medium
- impronta janto ticketing software, janto ticketing system +1 moreIDOR vulnerability in Janto Ticketing Software7.5 High
- impronta janto ticketing software, janto ticketing system +1 moreIDOR vulnerability in Janto Ticketing Software7.5 High
- seopressWordPress SEOPress plugin <= 7.7.1 - Sensitive Data Exposure vulnerability5.3 Medium
- ninjateam filebird, filebird – wordpress media library folders & file manager +1 moreFileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference5.4 Medium
- vaales technologies v qrsSQL injection vulnerability in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to...7.5 High
- novel-plusArbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to...7.5 High
- ethosethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man...9.1 Critical
- crelly slider project slider, fabio rinaldi crelly slider +1 moreWordPress Crelly Slider plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- hospital management system project management system, mayurik hospital management system +1 moreInsecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows...7.6 High
- phpgurukul doctor appointment management systemPHPGurukul Doctor Appointment Management System view-appointment-detail.php resource injection6.3 Medium
- zammadAn issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially...9.1 Critical
- metagauss profilegrid, wordpress profile grid +1 moreWordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- metagauss profilegridWordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerability5.4 Medium
- blazzdev rate my post, feedbackwp rate my post – wp rating system +1 moreWordPress Rate My Post plugin <= 3.4.4 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- webidsupport webidWebid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control...8.8 High
- wpfactory ean for woocommerce, wpcodefactory ean barcode generator for woocommerce: upc, isbn & gtin inventory +1 moreEAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode4.3 Medium
- plechev andrey wp-recall, wordpress adserve +1 moreWordPress WP-Recall plugin <= 16.26.5 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary9.1 Critical
- combodo itopiTop missing silo check on extkey in console and portal4.1 Medium
- hewlett packard enterprise hpe flexnetwork and flexfabric productsCertain HPE FlexNetwork and FlexFabric Switches, Remote Authentication Bypass6.9 Medium
- reporticoReportico affected by Incorrect Access Control6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary7.5 High
- bob watu quizWatu Quiz <= 3.4.1 - Sensitive Information Disclosure4.3 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePlugin Permalink <= 2.4.3.1 - Missing Authorization via get_uri_editor4.3 Medium
- stellarwp event tickets and registrationEvent Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure4.3 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.3 - Insecure Direct Object Reference6.5 Medium
- lg webosPIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction7.2 High
- totolink ex200 firmwareIn TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without...9.1 Critical
- gnu savaneInsecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker...7.5 High
- metagauss profilegridWordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability4.3 Medium
- repute infosystems bookingpressWordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- extremepacs extreme xdsIDOR in ExtremePacs's Extreme XDS8.8 High
- Show moreLoading…