CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
bluezUbuntuBluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey...6.8 Medium- oretnom23 railway reservation system, sourcecodester online railway reservation system +1 moreSourceCodester Online Railway Reservation System Ticket ?page=tickets access control5.3 Medium
- aimeos ai-controller-frontend, frontend controller +1 moreaimeos/ai-controller-frontend has IDOR vulnerability in account profile page5.3 Medium
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation8.8 High
- jianbo rest api to miniprogram, rest-api-to-miniprogram +1 moreREST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover9.8 Critical
- wpcharitable charitable, smub charitable – donation plugin for wordpress – fundraising with recurring donations & more +1 moreDonation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress <= 1.8.1.14 - Insecure Direct Object Reference to Account Takeover and Privilege Escalation9.8 Critical
- envoyproxy envoyPotential manipulate `x-envoy` headers from external sources in envoy6.5 Medium
- pumaHeader normalization allows for client to clobber proxy set headers in Puma5.4 Medium
- vercel next.jsCache Poisoning in next.js7.5 High
- getsentry sentryImproper authorization on muting of alert rules in sentry7.1 High
- getsentry sentryImproper authorization on deletion of user issue alert notifications in sentry6.5 Medium
- in2code powermailpowermail TYPO3 extension has Insecure Direct Object Reference7.5 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab3.1 Low
- mfasoft secure authentication serverAn improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties...7.5 High
- ankitpokhrel woocommerce multiple free giftWooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding5.3 Medium
- lunary, lunary-ai lunary-ai/lunary, lunary-ai\/lunary +2 moreImproper Access Control in lunary-ai/lunary6.5 Medium
- utarit soliclubIDOR in Utarit Information's SoliClub8.8 High
- utarit soliclubIDOR in Utarit Information's SoliClub8.8 High
- mirapolis lmsAn issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object...4.3 Medium
- simple online planning so planning, soplanning +1 moreInsecure Direct Object Reference to export Database in SOPlanning before 1.52.029.3 Critical
- reedos aim-star, reedos software solutions mutual fund distribution product (aim-star) +1 moreImproper Authorization Vulnerability8.7 High
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer...4.7 Medium
- siemens industrial edge management pro, industrial edge management virtual +1 moreA vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5),...10.0 Critical
- techexcel back office software, techexcel inc. back office +1 moreImproper Access Control Vulnerability in TechExcel Back Office Software8.7 High
- forumwp, ultimatemember forumwp – forum & discussion board +1 moreForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover8.8 High
- accordors accord orsIDOR in Ariva Computer's Accord ORS9.2 Critical
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update9.8 Critical
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference5.4 Medium
- in2code powermail, typo3 +1 more"powermail" (powermail) Insecure Direct Object Reference (IDOR)5.3 Medium
- ptc thingworxAn Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view...6.5 Medium
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.102 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- 9front, 9front lib9p +1 moreUser impersonation for lib9p based 9p fileservers8.8 High
- mediajedi user private files, deepakkite file sharing & download manager – user private files +1 moreUser Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access4.3 Medium
- masteriyo, masteriyo - lms +1 moreWordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability4.3 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- gvectors wpforo forumWordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- checkout plugins stripe payments for woocommerce by checkout, checkoutplugins stripe payments for woocommerce +1 moreWordPress Stripe Payments For WooCommerce plugin <= 1.9.1 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- dylan james zephyr project managerWordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- propovoice crmWordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- upkeeper managerLeak of user information7.6 High
- upkeeper managerLeak of organizations messages8.6 High
- gravitymaster97 custom field for wp job managerCustom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode4.3 Medium
- directusDirectus 10.13.0 - Insecure object reference via PATH presets4.3 Medium
- friendicaInsecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain...9.8 Critical
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access...5.7 Medium
- thimpress learnpressWordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- projectsendprojectsend process.php get_preview resource injection6.9 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab6.8 Medium
- opentext arcsight intelligenceInsecure Direct Object Reference vulnerability6.3 Medium
- free5gc smf, simplemachines simple machines forum +1 moreSimpleMachines SMF User Alert Read Status index.php resource injection5.3 Medium
- Show moreLoading…