CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- syntacticsinc easync, syntactics easync booking – hotels, restaurants & car rentals +1 moreFree Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure5.3 Medium
- clickeduInsecure Direct Object Reference (IDOR) in Clickedu8.7 High
- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform Listing authorization5.3 Medium
- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform updateListing cross site scripting5.1 Medium
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability4.3 Medium
- typo3 reint downloadmanager extensionreint_downloadmanager TYPO3 Extension is susceptible to Insecure Direct Object Reference8.6 High
- typo3 sr feuser register extensionThe Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference8.6 High
- typo3 femanager extensionThe femanager TYPO3 extension allows Insecure Direct Object Reference5.3 Medium
- blaze concepts better customer list for woocommerceWordPress Better Customer List for WooCommerce Plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- buddyboss platform, unknown buddyboss-platform +1 moreBuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR3.5 Low
- combodo itopiTop portal user can see any other contact's picture5.0 Medium
- combodo itopiTop portal Insecure Direct Object Reference vulnerability6.5 Medium
- latepoint – calendar booking plugin for appointments and eventsLatepoint <= 5.1.92 - Unauthenticated Insecure Direct Object Reference5.3 Medium
- peepso core: file uploadsPeepSo Core: File Uploads <= 6.4.6.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download5.3 Medium
- arkenon login, registration and lost password blocksFrontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- iqonic wpbookitWPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update9.8 Critical
- iqonic wpbookitWPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- cisco ios xe software, ios xe +1 moreA vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE...4.3 Medium
- eoxia wpshop 2 – e-commerceWPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation6.5 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion5.3 Medium
- pixel prime reales wp stptReales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update8.8 High
- casdoorCasdoor SCIM User Creation Endpoint scim.go HandleScim authorization6.9 Medium
- fave themes homeyHomey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion4.3 Medium
- grokability, inc. snipe-itGrokability Snipe-IT has incorrect authorization for accessing asset information5.0 Medium
- mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 moreWordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'5.3 Medium
- mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 moreWordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference6.5 Medium
- macrozheng mallWeitong Mall Product Statistics queryTotal access control6.9 Medium
- moodleMoodle: idor in web service allows users enrolled in a course to access some details of other users4.3 Medium
- moodleMoodle: idor in moodle rss block allows unauthorized access to rss feeds4.3 Medium
- moodleMoodle: user dos and name disclosure via idor in moodle mfa email factor revoke action7.1 High
- xpertsclub woocommerce automatic order printing | ( formerly woocommerce google cloud print)Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) <= 4.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Information Disclosure4.3 Medium
- codeastro bus ticket booking systemInsecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows...8.0 High
- meon bidding solutionsImproper Access Control Vulnerability in Meon Bidding Solutions9.3 Critical
- unblu inc. sparkReplace uploaded files knowing the file upload ID7.0 High
- scott taylor avatarWordPress Avatar plugin <= 0.1.4 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- growatt cloud portalGrowatt Cloud portal Authorization Bypass Through User-Controlled Key6.9 Medium
- Show moreLoading…