CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- baratz innovación absysnetIDOR vulnerability in AbsysNet7.5 High
- themes4wp popularis extraPopularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- nextcloud tables, kiteworks security-advisories +1 moreShare information of the Nextcloud Tables app is not limited to affected users3.5 Low
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables6.3 Medium
- dolibarr, dolibarr dolibarr/dolibarr, erp\/crm +2 moreImproper Authorization in dolibarr/dolibarr4.3 Medium
- geeeeeeeek java shopjava_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain...6.5 Medium
- wedevs wp project manager, project manager – ai powered project management, task management, kanban board & time tracker +1 moreWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass7.3 High
- duongancol boostify header footer builder for elementorBoostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- staxwp buddybuilder, buddypress builder for elementor – buddybuilder +1 moreBuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- fortinet fortiportalAn authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet...5.1 Medium
- futuriowp futurio extraFuturio Extra <= 2.0.13 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- No product listedSOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. Any authorized...7.6 High
- mayurik hospital management systemSourceCodester Hospital Management System delete-account.php improper authorization5.3 Medium
- crestaproject attesa extraAttesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- bplugins content slider block – slide through text or media contentContent Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- bplugins countdown timer block – animated countdown for events or launchesCountdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- envothemes envo extraEnvo Extra <= 1.9.3 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- sktthemes skt addons for elementorSKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- codeless cowidgets – elementor addons, cowidgets elementor addons +1 moreCowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure5.3 Medium
- khaledsaikat user meta – user profile builder and user management pluginUser Meta – User Profile Builder and User management plugin <= 3.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure6.5 Medium
- amazon data.alldata.all authenticated users can obtain incorrect object level authorizations5.3 Medium
- moodleMoodle: idor in feedback non-respondents report allows messaging arbitrary site users7.5 High
- moodleMoodle: idor in badges allows deletion of arbitrary badges7.5 High
- 63moons wave 2.0, aero +1 moreImproper Access Control Vulnerability in Wave 2.07.1 High
- paid memberships pro memberships pro, paidmembershipspro paid memberships pro +1 moreWordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- totolink lr350, lr350 firmware +1 moreTOTOLINK LR350 formLoginAuth.htm authorization6.9 Medium
- sismart cmsAn Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to...8.8 High
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation5.3 Medium
- phpgurukul beauty parlour management systemAn Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul...7.5 High
- grafanaGrafana org admin can delete pending invites in different org2.2 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR in lunary-ai/lunary9.1 Critical
- meetupWordPress Meetup plugin <= 0.1 - Broken Authentication vulnerability9.8 Critical
- sun.net ehrd ctmsSunnet eHRD CTMS - Insecure Direct Object Reference5.3 Medium
- igexsolutions wpschoolpress, jdsofttech school management system – wpschoolpress, school management system +2 moreSchool Management System – WPSchoolPress <= 2.2.10 - Insecure Direct Object Reference to Authenticated (Teacher+) Account Takeover/Privilege Escalation8.8 High
- radarwfh45678 Radar Interface authorization6.9 Medium
- arraytics timetics, timetics – appointment booking & scheduling +1 moreWP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover9.8 Critical
- publishpress authors, co-authors, multiple authors and guest authors in an author box with publishpress authors +1 moreCo-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account…8.8 High
- cyberlord92 miniorange otp verification with firebase, miniorange otp verification, otp verification with firebase +2 moreMiniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change9.8 Critical
- dassault systèmes 3dswymerAuthorization Bypass Through User-Controlled Key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x7.7 High
- podpirate acf quick edit fieldsACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference6.5 Medium
- acronis cyber protect 16, cyber protect +1 moreSensitive information manipulation due to improper authorization. The following products are...3.1 Low
- dueclic wp 2fa with telegram, authpress +1 moreWP 2FA with Telegram <= 3.0 - Authenticated (Subscriber+) Authentication Bypass8.8 High
- kubesphereKubeSphere IDOR vulnerability4.3 Medium
- juniper junos os evolved, junos evolved +1 moreJunos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.8.4 High
- open-webui, open-webui open-webui/open-webui, openwebui open webui +2 moreIDOR in open-webui/open-webui6.5 Medium
- sovell smart canteen systemSovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization6.3 Medium
- dimitri grassi salon booking systemWordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- shilpi computers net back officeImproper Access Control Vulnerability7.1 High
- cisco meraki mx firmware, meraki mx100 firmware, meraki mx105 firmware +23 more +25 moreA vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series...5.8 Medium
- Show moreLoading…