CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- free5gc smf, simplemachines simple machine forum, simple machines forum +2 moreSimpleMachines SMF Delete User index.php resource injection5.3 Medium
- litestreamAn issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey()...5.3 Medium
- academy lms lms, kodezen academy lms +1 moreWordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability4.3 Medium
- apache streamparkApache StreamPark IDOR Vulnerability6.5 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.13.0 - Insecure Direct Object Reference to Authenticated (GiveWP Worker+) Arbitrary Post Actions5.4 Medium
- apinizer, pruvasoft informatics apinizer management console +1 moreIDOR in PruvaSoft Informatics' Apinizer Management Console9.6 Critical
- syliusCustomer data leak via adjustments API endpoint in Sylius5.3 Medium
- nato nci anet nci anet, ncia advisor network +1 moreNATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request...8.1 High
- ncia advisor networkNATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the...6.5 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3 Medium
- opensearch-project reporting, opensearch observability +1 moreOpenSearch Dashboards Reports does not properly restrict access to private tenant resources5.4 Medium
- opensearch observabilityOpenSearch Observability does not properly restrict access to private tenant resources4.2 Medium
- project-zot zotCache driver GetBlob() allows read access to any blob without access control check4.3 Medium
- fortinet fortiportalAn authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and...3.9 Low
- easyappointmentsA BOLA vulnerability in POST /providers in EasyAppointments < 1.5.08.5 High
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.09.6 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.09.1 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0.8.5 High
- easyappointmentsA BOLA vulnerability in POST /services in EasyAppointments < 1.5.07.7 High
- easyappointmentsA BOLA vulnerability in POST /customers in EasyAppointments < 1.5.05.0 Medium
- easyappointmentsA BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.07.7 High
- easyappointmentsA BOLA vulnerability in POST /admins in EasyAppointments < 1.5.09.9 Critical
- easyappointmentsA BOLA vulnerability in POST /appointments in EasyAppointments < 1.5.07.7 High
- extremepacs extreme xdsIDOR in ExtremePacs's Extreme XDS6.5 Medium
- traefikTraefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes7.5 High
- ginuerzh gostMissing key verification in gost9.8 Critical
- ibm infosphere information serverIBM InfoSphere Information Server data modification5.4 Medium
- carlosfazenda page and post clone, fast page & post duplicator +1 morePage and Post Clone <= 6.0 - Insecure Direct Object Reference to Authenticated (Author+) Sensitive Information Exposure4.3 Medium
- talya informatics travel appsIDOR in Talya Informatics' Travel APPS9.8 Critical
- bricks builder, bricksbuilder bricks, bricks builder +2 moreBricks Builder <= 1.9.8 - Insecure Direct Object Reference4.3 Medium
- cozmoslabs user profile pictureUser Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update4.3 Medium
- typo3 events2events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability5.4 Medium
- kiuwan sastInsecure Direct Object Reference in Kiuwan SAST6.5 Medium
- aspengrovestudios replace imageReplace Image <= 1.1.10 - Insecure Direct Object Reference4.3 Medium
- treyww myfinancesMyFinances Allows Unauthorized Access to Other Customer Data6.5 Medium
- latepoint, latepoint plugin +1 moreLatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR9.1 Critical
- lb-link bl-w1210m firmwareAn issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity...6.3 Medium
- strapi@strapi/plugin-content-manager leaks data via relations via the Admin Panel2.3 Low
- iqonic kivicareWordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS – eLearning and online course solution <= 2.7.1 - Authenticated (Instructor+) Insecure Direct Object Reference to Arbitrary Quiz Attempt Deletion4.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIncorrect Authorization in lunary-ai/lunary7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary9.4 Critical
- kanboardKanboard affected by Project Takeover via IDOR in ProjectPermissionController8.2 High
- Show moreLoading…