CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- khojKhoj has an IDOR in Notion OAuth Flow Enables Index Poisoning5.4 Medium
- crmebZhong Bang CRMEB :uni tidyOrder improper authorization5.3 Medium
- psmplugins supportcandy – helpdesk & customer support ticket systemSupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference5.4 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Privilege Escalation6.8 Medium
- elektraweb easypmsEasyPMS 1.0.0 - Authentication Bypass8.7 High
- qr menu pro smart menu systems menu panelIDOR in QRMenumPro's Menu Panel5.7 Medium
- bplugins document embedder – embed pdfs, word, excel, and other filesDocument Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion4.3 Medium
- oneflowA division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows...6.5 Medium
- studiocmsStudioCMS has an Authorization Bypass Through User-Controlled Key6.5 Medium
- askbotAskbot 0.12.2 - Insecure Direct Object Reference (IDOR)5.3 Medium
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 moreDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 High
- amir20 dozzleDozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access8.7 High
- red hat openshift virtualization 4, rhel-9-cnv-4.19 +1 moreVirt-cdi-controller: unauthorized pvc cloning via dataimportcron8.5 High
- tp-link omada controllerIDOR Leading to Owner Account Hijacking in Omada Controller8.3 High
- saleorSaleor has an Insecure Direct Object Reference (IDOR) in GraphQL API8.7 High
- rustaurius ultimate reviewsWordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- mikado-themes rosebudWordPress Rosebud theme <= 1.4 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- xlplugins nextmove liteWordPress NextMove Lite plugin <= 2.23.0 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- gitea, gitea open source git server, red hat openshift pipelines +2 moreGitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure9.1 Critical
- gitea, gitea open source git server +1 moreGitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes6.5 Medium
- gitea, gitea open source git server, red hat openshift pipelines +2 moreGitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)9.1 Critical
- hubitat elevation c3, elevation c4, elevation c5 +3 more +5 moreAuthorization Bypass Through User-Controlled Key in Hubitat Elevation Hubs9.4 Critical
- surrealdbSurrealDB before 2.5.0 Privilege Escalation via Future Fields7.5 High
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.4.3 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- mikado-themes verdureWordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- elated-themes sweet janeWordPress Sweet Jane theme <= 1.2 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes dolcinoWordPress Dolcino theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes justiciaWordPress Justicia theme <= 1.2 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes roamWordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes overtonWordPress Overton theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes innovioWordPress Innovio theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes holmesWordPress Holmes theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes fleurWordPress Fleur theme <= 2.0 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes fiorelloWordPress Fiorello theme <= 1.0 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes curlyWordPress Curly theme <= 3.3 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- mikado-themes coccoWordPress Cocco theme <= 1.5.1 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability3.8 Low
- typebot, baptistearno typebot.io +1 moreTypebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass7.4 High
- solvera software services trade inc. teknoeraIDOR in Solvera Software's Teknoera7.5 High
- exert computer technologies software ltd. co. education management systemIDOR in EXERT Computer Technologies' Education Management System7.5 High
- joinmastodon mastodonMastodon has insufficient access control to push notification settings6.5 Medium
- d-link d-view 8D-Link D-View 8 IDOR Allows Credential Disclosure and Account Takeover8.7 High
- kodezen academy lms – wordpress lms plugin for complete elearning solutionAcademy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- whisper.money whisper money, whisper-money +1 moreWhisper Money has IDOR Vulnerability on sync/balances endpoint4.9 Medium
- sibercii6-crypto teklifolustur appteklifolustur_app's IDOR vulnerability allows unauthorized access to other users' offers7.1 High
- lobehub lobe-chatLobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion3.7 Low
- liquidweb restrict content, stellarwp membership plugin – restrict content +1 moreMembership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure8.2 High
- paultgoodchild shield: blocks bots, protects users, and prevents security breachesShield Security <= 21.0.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Disable Google Authenticator4.3 Medium
- glpi-project glpiGLPI incorrectly authorizes access to documents7.5 High
- chainlitChainlit contains an authorization bypass vulnerability2.3 Low
- Show moreLoading…