CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- litmuschaos litmusLitmusChaos Litmus LocalStorage authorization4.8 Medium
- portabilis i-educarPortabilis i-Educar API Endpoint Diario authorization5.3 Medium
- macrozheng mallmacrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization6.9 Medium
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover8.8 High
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation security bypass6.5 Medium
- sagedpw sage dpwAn Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized...5.3 Medium
- emby mediabrowserCWE-639 Authorization Bypass Through User-Controlled Key8.8 High
- emby mediabrowserCWE-639 Authorization Bypass Through User-Controlled Key8.8 High
- No product listedInsecure Direct Object Reference (IDOR) vulnerability in PdfHandler component in Agenzia Impresa...7.5 High
sogoUbuntuAn Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6...4.3 Medium- aonetheme service finder bookingsService Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie9.8 Critical
- No product listedCS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference (IDOR). The user profile...8.0 High
- agpt autogpt platform, significant-gravitas autogpt +1 moreAutoGPT Platform Exposes Graph Execution Results via Authorization Gap7.7 High
- glpi-project glpiGLPI permits reservation modification by unauthorized users5.4 Medium
- salesforce tableau server, tableau server +1 moreAuthorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on...8.1 High
- salesforce tableau server, tableau server +1 moreAuthorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on...8.1 High
- salesforce tableau server, tableau server +1 moreAuthorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on...8.0 High
- etq reliance cg (legacy), reliance nxg (saas) +1 moreETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI Suffix8.7 High
- typo3 extension "femanager", typo3 +1 moreInsecure Direct Object Reference in extension "femanager" (femanager)5.3 Medium
- typo3 extension "powermail"Insecure Direct Object Reference in extension "powermail" (powermail)6.0 Medium
- jishenghua jsherpjshERP Account delete improper authorization5.3 Medium
- No product listedInsecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru...6.5 Medium
- No product listedAi2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to...8.8 High
- onyxAuthorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows...5.4 Medium
- jerryshensjf jpacookieshop, jpacookieshop 蛋糕商城jpa版 +1 morejerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java updateGoods authorization5.3 Medium
- pavo inc. payIDOR in PAVO Inc.'s PAVO Pay7.5 High
- turpak automatic station monitoring systemIDOR in Turpak's Automatic Station Monitoring System7.1 High
- akbim software online exam registrationIDOR in Akbim Software's Online Exam Registration4.4 Medium
- turtek software eyotekIDOR in Turtek Software's Eyotek6.5 Medium
- turtek software eyotekIDOR in Turtek Software's Eyotek7.5 High
- No product listedInsecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers...7.5 High
- No product listedInsecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows...7.5 High
- vidco software voc testerIDOR in Vidco Software's VOC TESTER5.5 Medium
- cern indicoIndico vulnerable to user enumeration via API endpoint5.3 Medium
- schiocco support boardSupport Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key9.8 Critical
- delinea secret serverThe distributed engine of Secret Server versions 11.7.49 and earlier can be exploited during an...3.8 Low
- intelbras incontrol, incontrol web +1 moreIntelbras InControl HTTP PUT Request operador permission5.3 Medium
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT missing validation for in-progress backup upload names5.3 Medium
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT247.5 High
- 201206030 novel-plusxxyopen/201206030 novel-plus File FileController.java remove resource injection2.3 Low
- phpgurukul online dj booking management systemPHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object...6.5 Medium
- eyecix jobsearchWordPress JobSearch plugin < 3.0.6 - Insecure Direct Object References (IDOR) Vulnerability4.3 Medium
- dfactory download attachmentsWordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- codeastro real estate management systemScriptAndTools Real Estate Management System User Delete userdelete.php authorization5.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab4.3 Medium
- fortinet fortiportalA authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0,...3.9 Low
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- Show moreLoading…