CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- cal cal.comCal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback10.0 Critical
- siemens industrial edge cloud device (iecd), industrial edge device kit - arm64 v1.10, industrial edge device kit - arm64 v1.11 +104 more +106 moreAffected devices do not properly enforce user authentication on specific API endpoints. This...10.0 Critical
- netapp ontap, ontap 9 +1 moreONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking...6.9 Medium
- viafirma inboxMultiple vulnerabilities in Viafirma products8.6 High
- broadcom dx netops spectrumSpectrum broken authorization scheme2.3 Low
- exrick xmallIncorrect access control in the /member/orderList API of xmall v1.1 allows attackers to...8.2 High
- woocommerce squareWooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id7.5 High
- ricoh company, ltd. streamline nxImproper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the...8.2 High
- spreeSpree API has Unauthenticated IDOR - Guest Address7.5 High
- spreeSpree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification6.5 Medium
- opexus ecomplaint, opexustech ecase ecomplaint +1 moreOPEXUS eComplaint IDOR8.7 High
- opexus ecase portalOPEXUS eCasePortal unauthenticated IDOR9.3 Critical
- wptexture image slider slideshowWordPress Image Slider Slideshow plugin <= 1.8 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- asseco amdxInformation disclosure via IDOR in Asseco AMDX5.3 Medium
- wofficeio woffice coreWordPress Woffice Core plugin <= 5.4.30 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- djanym optional emailOptional Email <= 1.3.11 - Unauthenticated Privilege Escalation to Account Takeover9.8 Critical
- airesvsg acf to rest apiACF to REST API <= 3.3.4 - Insecure Direct Object Reference to Authenticated (Contributor+) ACF Field/Option Modification4.3 Medium
- thimpress learnpress – wordpress lms plugin for create and sell online coursesLearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion5.4 Medium
- pro-bravia sony bravia digital signage, sony electronics inc. bravia digital signage, sony bravia signage +2 moreSony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR6.9 Medium
- fsylum fs registration passwordFS Registration Password <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- aksharsoftsolutions as password field in default registration formAS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- rustaurius five star restaurant reservationsWordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability8.6 High
- bagistoBagisto has IDOR in Customer Order Reorder Functionality7.1 High
- wpmudev branda – white label & branding, free login page customizerBranda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- yoohw studio order cancellation & returns for woocommerceWordPress Order Cancellation & Returns for WooCommerce plugin <= 1.1.10 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- eduardo villão myd deliveryWordPress MyD Delivery plugin <= 1.7.1 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- liton arefin master addons for elementorWordPress Master Addons for Elementor plugin <= 2.0.9.9.4 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- mikado-themes fivestarWordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes backpack travelerWordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- select-themes strukturWordPress Struktur theme <= 2.5.1 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- advancedcoding wpdiscuzWordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- simplecalendar google calendar eventsWordPress Google Calendar Events plugin <= 3.5.9 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- eagle-themes eagle bookingWordPress Eagle Booking plugin <= 1.3.4.3 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- crocoblock jetpopupWordPress JetPopup plugin <= 2.0.20.1 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- arthurfiorette axios-cache-interceptor, axios-cache-interceptor axios cache interceptor +1 moreaxios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header6.0 Medium
- getmaxun maxungetmaxun Authentication Endpoint auth.ts router.get improper authorization5.3 Medium
- smartwares home easySmartwares HOME easy 1.0.9 Client-Side Authentication Bypass via Web Pages8.8 High
- soca technology co., ltd access control systemSOCA Access Control System 180612 Information Disclosure via Multiple Endpoints7.1 High
- wp swings membership for woocommerceWordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- orangescrumOrangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation8.7 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Authorization Bypass via Insecure Object References9.3 Critical
- No product listedWP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference4.3 Medium
- pretixInsecure direct object reference3.8 Low
- pretix pretix-offlinesalesInsecure direct object reference3.8 Low
- turms-im turmsTurms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in...6.5 Medium
- pickplugins post grid and gutenberg blocksWordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- radiustheme radius blocksWordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- utarit soliclubIDOR in Utarit Informatics' SoliClub7.5 High
- realmag777 husky – products filter professional for woocommerceHUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'4.3 Medium
- govee h6056Gaining remote control over Govee devices9.3 Critical
- Show moreLoading…