CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- wwbn avideoAVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check5.3 Medium
- wwbn avideoAVideo Missing Authorization in addLiveLink.php LiveLink Update7.1 High
- unknown nexi xpay buildNexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Saved Payment Token Disclosure via IDOR5.3 Medium
- themeisle visualizerVisualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR5.5 Medium
- unknown yith woocommerce wishlist, yith woocommerce wishlist +1 moreYITH WooCommerce Wishlist < 4.18.1 - Unauthenticated Arbitrary Wishlist Rename via change_wishlist_title5.3 Medium
- unknown advanced-customized-promptsAdvanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata Tampering4.3 Medium
- concrete cms cmsConcrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) in the Calendar block's frontend event dialog (/ccm/calendar/view_event/{bID}/{occurrence_id}).6.3 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software7.4 High
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities due to open source software7.7 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation6.5 Medium
- concrete cms cmsConcrete CMS 8.3.0 through 9.5.2 is vulnerable to an authorization bypass through user-controlled key (cross-calendar IDOR) in the Calendar event edit dialog5.9 Medium
- traefikTraefik v3.7.0 Authentication Bypass via from-to-www-redirect9.3 Critical
- wwbn avideoAVideo Missing Authorization via getRestream.json.php8.6 High
- apache camel, apache software foundation camel k +1 moreApache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace8.1 High
- shirasagi project shirasagiAn authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which...5.3 Medium
- d-zero co.,ltd. burgereditorBurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass through user...5.3 Medium
- identrailidentrail: Cross-tenant GitHub installation binding without ownership verification8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can inject chats into another user's folder via chat completions4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Channel members can overwrite another member's message via the chat completions endpoint4.3 Medium
- smithyhq sqladminSQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`5.3 Medium
- sage ar automationCash Collect contains an improper authorization vulnerability in the Sage AR Automation API....9.0 Critical
- grokability snipe-itsnipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer5.1 Medium
- grokability snipe-itsnipe-it 8.6.3 before 8.7.0 Authorization Bypass via print endpoints5.3 Medium
- grokability snipe-itSnipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report5.3 Medium
- siyuan-note siyuanSiyuan before v3.8.2 Information Disclosure via Export Preview7.1 High
- sunshinephotocart sunshine photo cartSunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR5.3 Medium
- unknown wp travel, wp travel travel +1 moreWP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR3.7 Low
- tanium complyTanium addressed an improper access controls vulnerability in Comply.5.4 Medium
- tanium complyTanium addressed an improper access controls vulnerability in Comply.5.4 Medium
- tanium complyTanium addressed an improper access controls vulnerability in Comply.6.3 Medium
- tanium complyTanium addressed an improper access controls vulnerability in Comply.4.3 Medium
- mageplaza gdprMissing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza...7.5 High
- ibm enterprise build of quarkusIBM Enterprise Build of Quarkus is affected by multiple vulnerabilities7.4 High
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability8.8 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Tampering Vulnerability6.5 Medium
- bitfrost.io bifrostBifrost Unauthorized Channel Commission Attribution Allows Commission Diversion9.1 Critical
- wwbn avideoAVideo SocialMediaPublisher Missing Authorization via add.json.php7.1 High
- wwbn avideoWWBN AVideo Missing Authorization via resendRestreamer.json.php8.6 High
- xenforoXenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint5.1 Medium
- magepeople inc. wpeventlyWordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private...6.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints...6.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted...4.3 Medium
- mispMISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects5.3 Medium
- themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fseOtter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass5.3 Medium
- mispMISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events7.1 High
- sourcecodester syllabus-aligned learning management & examination systemSourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization6.9 Medium
- sfturing hosp ordersfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization6.9 Medium
- sfturing hosp ordersfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization6.9 Medium
- sfturing hosp ordersfturing hosp_order Order Controller OrderController.java authorization6.9 Medium
- Show moreLoading…