CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- proliz software obs, prolizyazilim student affairs information system +1 moreIDOR in Proliz Software's OBS7.5 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab5.3 Medium
- serosoft academia student information systemAn Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId...6.5 Medium
- ultrapressorg ultra addons lite for elementorUltra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure4.3 Medium
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct...9.1 Critical
- ninja team filebirdWordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability3.8 Low
- ameliabooking ameliaWordPress Amelia plugin <= 1.2.16 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- mayurik best employee management systemSourceCodester Best Employee Management System salary_slip.php authorization5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection4.3 Medium
- infiniflow ragflowPotential Insecure Direct Object Reference (IDOR) vulnerability in ragflow8.1 High
- rapid response monitoring my security account app apiRapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key8.7 High
- nilambar prime addons for elementorPrime Addons for Elementor <= 2.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference via pae_global_block Shortcode4.3 Medium
- nicheaddons education addon for elementor, education addon +1 moreEducation Addon for Elementor <= 1.3.1 - Authenticated (Contributor+) Insecure Direct Object Reference via naedu_elementor_template Shortcode4.3 Medium
- pepro peprodev ultimate invoice, peprodev ultimate invoice +1 morePeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure5.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure4.3 Medium
- wpswings return refund and exchange for woocommerceReturn Refund and Exchange For WooCommerce <= 4.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference5.4 Medium
- strongkey fido serverStrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a...8.4 High
- anapi h6webInsecure direct object reference (IDOR) vulnerability in H6Web9.1 Critical
- detheme dethemekit for elementorDethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure4.3 Medium
- ahmadmj majestic support – the leading-edge help desk & customer support plugin, majesticsupport majestic support +1 moreMajestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.0.5 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3 Medium
- No product listedAn authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal,...8.8 High
- distributionDistribution's token authentication allows attacker to inject an untrusted signing key in a JWT6.6 Medium
- opcfoundation ua .net standard stack, siemens simatic energy manager pro v7.2, simatic energy manager pro v7.3 +3 more +5 moreSecurity Update for the OPC UA .NET Standard Stack8.6 High
- daveshine builder shortcode extras – wordpress shortcodes collection to save you timeBuilder Shortcode Extras – WordPress Shortcodes Collection to Save You Time <= 1.0.0 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- No product listedIn Newgensoft OmniDocs 11.0_SP1_03_006, Insecure Direct Object Reference (IDOR) in the...7.5 High
- manageengine endpoint central, zohocorp manageengine endpoint central +1 moreIDOR3.5 Low
- nicheaddons medical addon for elementorMedical Addon for Elementor <= 1.6.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode4.3 Medium
- rabilal js help desk – ai-powered support & ticketing systemJS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3 Medium
- nirwp team nirweb supportWordPress Nirweb support plugin <= 3.0.3 - Broken Access Control vulnerability4.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download5.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion4.3 Medium
- wpjobportal wp job portal, wp job portal – ai-powered recruitment system for company or job board website +1 moreWP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion4.3 Medium
- seventhqueen typer coreTyper Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- moreconvert woocommerce wishlist, wishlist for woocommerce +1 moreWooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function7.5 High
- liquidweb event tickets, stellarwp event tickets and registration +1 moreEvent Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure5.3 Medium
- typo3 oidcTYPO3-EXT-SA-2025-001: Account Takeover in extension "OpenID Connect Authentication" (oidc)4.2 Medium
- coollabs coolifyCoolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)6.5 Medium
- schneider electric powerlogic hdpm6000CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow...8.7 High
- i3 verticals truefilingTrueFiling authorization bypass via user-controlled keys6.3 Medium
- cern indicoIndico Insecure Access0.0 None
- piotnetdotcom piotnet addons for elementorPiotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- sap se business workflow and sap flexible workflow, sap basis +1 moreInformation Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow6.5 Medium
- codepopular unlimited theme addon for elementorUnlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- rrdevs rraddons for elementorRRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by insecure direct object references7.1 High
- Show moreLoading…