Browse / Insecure Direct Object Reference

Insecure Direct Object Reference

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Insecure Direct Object Reference (IDOR)373

Often found together with

• Access Control104
• Information Disclosure66
• Authentication43
• Misconfiguration30

Most upvoted Insecure Direct Object Reference reports

AllValidInformativeN/ADuplicate

1. IDOR to view order information of users and personal informationN/AInsecure Direct Object Reference (IDOR) · WakaTime
   126 votes
2. IDOR on ██████ via direct photo URL leads to unauthorized access to deleted and other users' photosN/AInsecure Direct Object Reference (IDOR) · Nextcloud
   37 votes
3. read and message other user's messagesN/AInsecure Direct Object Reference (IDOR) · critical · Reddit
   14 votes
4. Adding everyone to the repo due to the lack of rate limitN/AInsecure Direct Object Reference (IDOR) · high · GitLab
   8 votes
5. Able to bypass information requirements before launching a Chat.N/AInsecure Direct Object Reference (IDOR) · medium · Starbucks
   6 votes