CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreData-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy7.1 High
- spacebar server serverSpacebar Server Cross-Channel Message Deletion via Permission Check Bypass7.1 High
- dokployDokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*9.9 Critical
- dokployDokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host9.9 Critical
- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable6.5 Medium
- apache software foundation airflow yandex provider, apache apache-airflow-providers-apache-yandex +1 moreApache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable6.5 Medium
- apache software foundation airflow microsoft azure providerApache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable5.3 Medium
- dokployDokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups9.6 Critical
- dokployDokploy: Cross-organization authorization bypass in server.remove allows deletion of another organization's server registration8.4 High
- discourseDiscourse: Private Chat Threat Message Disclosure via Chat Onebox Channel/Threat ID Mismatch4.3 Medium
- roskus prospero flow crmAuthorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export8.6 High
- roskus prospero flow crmMissing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation8.7 High
- attendizeAttendize Attendize - Cross-Tenant Authorization Bypass5.4 Medium
- opensignlabs opensignserverOpenSignLabs opensignserver - Broken Object Level Authorization7.5 High
- fosrl pangolinfosrl Pangolin - Access Token Scope Bypass Allows Cross-Resource Authentication9.6 Critical
- copydeleteposts duplicate postCopy & Delete Posts < 1.5.5 - Authenticated Arbitrary Post Deletion via Missing Object-Level Authorization6.5 Medium
- unknown foodboxbookerFoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile Update4.3 Medium
- unknown booking for appointments and events calendarAmelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR3.8 Low
- dimitri grassi salon booking systemSalon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII Disclosure4.3 Medium
- jetmonsters motopress hotel bookingHotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR5.4 Medium
- cubewp1211 cubewp frameworkCubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOR4.9 Medium
- anh tran slim seoSlim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure2.7 Low
- jordy meow ai engineAI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie4.8 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint5.4 Medium
- testlinkTestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php7.1 High
- elated-themes frappeFrappe: Unrestricted access to a Document Follow API5.3 Medium
- mstore api, unknown mstore api +1 moreMStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR6.5 Medium
- unknown subscriptions for woocommerceSubscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR4.3 Medium
- flowiseai flowiseFlowise 3.1.4 IDOR in OpenAI Assistants Integration8.5 High
- statamic cmsStatamic: Missing authorization on navigation endpoint allows disclosure of restricted entries6.5 Medium
- diboot diboot-corediboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Salts7.1 High
- sourcecodester online examination & learning management systemSourceCodester Online Examination & Learning Management System view_students.php authorization5.3 Medium
- amazon strands-agents-toolsInsecure direct object reference in Strands Agents Tools memory tool namespace isolation8.6 High
- sourcecodester online examination & learning management systemSourceCodester Online Examination & Learning Management System view.php authorization5.3 Medium
- rustaurius five star restaurant reservationsFive Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR5.3 Medium
- unknown events made easyEvents Made Easy < 3.1.2 - Unauthenticated Payment Bypass5.3 Medium
- payment plugins for paypal woocommerce, unknown payment plugins for paypal woocommerce +1 morePayment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order7.5 High
- themeum tutor lmsTutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass4.3 Medium
- unknown integrate phonepe with woocommerceIntegrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID Reuse7.5 High
- escriptoriumAuthorization Bypass Through User-Controlled Key in eScriptorium8.8 High
- escriptoriumAuthorization Bypass Through User-Controlled Key in eScriptorium6.5 Medium
- colissimo officiel : méthodes de livraison pour woocommerceWordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- approveme formidable forms signature online contract automationWordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- mercado pago payments for woocommerce, mercadopago mercado pago payments for woocommerce +1 moreWordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- wso2 identity server, token exchange grant type for oauth +1 moreImproper Implicit Association via User Store Initialization in WSO2 Identity Server [Identity Confusion / External IDP Use]4.3 Medium
- pepro dev. group peprodev woocommerce receipt uploaderPeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR5.3 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement7.1 High
- apache answerApache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL6.5 Medium
- akauntingAkaunting - Cross-Company Media IDOR in Customer Portal Download Endpoint6.5 Medium
- crater-invoice craterCrater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy8.2 High
- Show moreLoading…