CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud Applications Authorization Bypass Through User-Controlled Key6.9 Medium
- t-innova deporsiteInsecure Direct Object Reference en Deporsite de T-INNOVA8.7 High
- t-innova deporsiteInsecure Direct Object Reference on Deporsite by T-INNOVA8.7 High
- code-projects employee management systemTutorials-Website Employee Management System update-user.php improper authorization6.9 Medium
- code-projects employee management systemTutorials-Website Employee Management System delete-user.php improper authorization6.9 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification5.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update4.3 Medium
- dnnsoftware dotnetnuke, dnn.platform +1 moreDNN allows a registered user to enumerate and access files they should not have access to6.5 Medium
- iqonicdesign streamitStreamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover8.8 High
- os4ed opensisAn insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS...7.5 High
- joomsky js job managerWordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- themeglow jobboard job listingWordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Insecure Direct Object References (IDOR) vulnerability4.9 Medium
- google androidIn multiple locations, there is a possible way to mislead a user into approving an authentication...7.8 High
- devitems support genixWordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability4.3 Medium
- gplsaver np quote request for woocommerceNP Quote Request for WooCommerce <= 1.9.179 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure7.5 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreImproper Access Control in gaizhenbiao/chuanhuchatgpt8.1 High
- superagi, transformeroptimus transformeroptimus/superagi +1 moreIDOR Vulnerability in transformeroptimus/superagi8.8 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary8.8 High
- danswer-ai danswer-ai/danswerIDOR in danswer-ai/danswer6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreBroken Access Control in lunary-ai/lunary4.3 Medium
- danny-avila danny-avila/librechat, librechat +1 moreImproper Access Control in danny-avila/librechat9.4 Critical
- infiniflow infiniflow/ragflow, ragflow +1 morePartial Account Takeover due to Insecure Data Querying in infiniflow/ragflow8.1 High
- danny-avila danny-avila/librechat, librechat +1 moreIDOR in delete attachments in danny-avila/librechat7.6 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in PATCH `/v1/runs/:id/score` Endpoint in lunary-ai/lunary7.5 High
- igexsolutions wpschoolpress, jdsofttech school management system – wpschoolpress +1 moreSchool Management System – WPSchoolPress <= 2.2.16 - Missing Authorization to Privilege Escalation via Account Takeover8.8 High
- omnipressteam omnipressOmnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- chimpgroup jobcareerWP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover9.8 Critical
- chimpgroup jobcareerWP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover9.8 Critical
- issuetrak auditIDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp7.7 High
- strategy11team business directory plugin – easy listing directories for wordpressBusiness Directory Plugin - Easy Listing Directories for WordPress <= 6.4.14 - Insecure Direct Object Reference to Listing Arbitrary Image Addition5.3 Medium
- espressif esp-idfEspressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass...8.8 High
- shanebp bp email assign templatesWordPress BP Email Assign Templates By shanebp plugin <= 1.7 - Arbitrary Content Deletion vulnerability6.5 Medium
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)4.3 Medium
- sap se s/4hana (manage bank statements)Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)4.3 Medium
- sap se fiori apps (posting library)Broken Access Control in SAP Fiori apps (Posting Library)4.3 Medium
- control id rh id, assaabloy control id rhid +1 moreControl iD RH iD PDF Document companyId resource injection5.3 Medium
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates4.3 Medium
- servicenow now platformAuthorization bypass in Now Platform7.1 High
- pik online yazılım çözümleri a.ş. online, pozitifik pik online +1 moreBroken Access Control in PozitifIK's Pik Online7.6 High
- zitadelIDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations9.0 Critical
- Show moreLoading…