Browse / Insecure Direct Object Reference

Insecure Direct Object Reference

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Insecure Direct Object Reference (IDOR)373

Often found together with

• Access Control104
• Information Disclosure66
• Authentication43
• Misconfiguration30

Most upvoted Insecure Direct Object Reference reports

AllValidInformativeN/ADuplicate

1. Unauthorized Reservation Cancellation Through IDOR VulnerabilityDuplicateInsecure Direct Object Reference (IDOR) · high · Yelp
   79 votes
2. IDOR on Program Visibilty (Revealed / Concealed) against other team membersDuplicateInsecure Direct Object Reference (IDOR) · medium · HackerOne
   33 votes
3. IDOR when editing email leads to Mass Full ATOs (Account Takeovers) without user interaction on https://██████/DuplicateInsecure Direct Object Reference (IDOR) · U.S. Dept Of Defense
   19 votes
4. Amount Manipulation Buy Unlimited Credits in just $1.00DuplicateInsecure Direct Object Reference (IDOR) · Inflection
   8 votes