Browse / Insecure Direct Object Reference

Insecure Direct Object Reference

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Insecure Direct Object Reference (IDOR)373

Often found together with

• Access Control104
• Information Disclosure66
• Authentication43
• Misconfiguration30

Most upvoted Insecure Direct Object Reference reports

AllValidInformativeN/ADuplicate

1. Delete anyone's content spotlight remotely.Insecure Direct Object Reference (IDOR) · high · Snapchat
   $15,000801 votes
2. IDOR to add secondary users in www.paypal.com/businessmanage/users/api/v1/usersInsecure Direct Object Reference (IDOR) · high · PayPal
   $10,500797 votes
3. How the Bug stole hackingInsecure Direct Object Reference (IDOR) · HackerOne
   471 votes
4. IDOR - Delete all Licenses and certifications from users account using CreateOrUpdateHackerCertification GraphQL queryInsecure Direct Object Reference (IDOR) · high · HackerOne
   395 votes
5. IDOR allows user to access report details via reference.json endpointInsecure Direct Object Reference (IDOR) · critical · HackerOne
   $15,000372 votes
6. Insecure Direct Object Reference (IDOR) - Delete Campaigns Insecure Direct Object Reference (IDOR) · high · HackerOne
   346 votes
7. Attachment disclosure via summary report Insecure Direct Object Reference (IDOR) · critical · HackerOne
   340 votes
8. Arbitrary Read of Another Users private repository without AuthorizationInsecure Direct Object Reference (IDOR) · high · GitHub
   $10,000276 votes
9. Deleting all DMs on RedditGifts.comInsecure Direct Object Reference (IDOR) · high · Reddit
   $5,000267 votes
10. Insecure Direct Object Reference (IDOR) Allows Viewing Private Report Details via /bugs.json EndpointInsecure Direct Object Reference (IDOR) · critical · HackerOne
    266 votes
11. Singapore - Account Takeover via IDORInsecure Direct Object Reference (IDOR) · critical · Starbucks
    260 votes
12. Steal private objects of other projects via project importInsecure Direct Object Reference (IDOR) · critical · GitLab
    $20,000254 votes
13. IDOR: Account Deletion via Session Misbinding – Attacker Can Delete Victim AccountInsecure Direct Object Reference (IDOR) · high · Mozilla
    244 votes
14. Insecure redirect rule results in bypassing ban redirect on certain pagesInsecure Direct Object Reference (IDOR) · medium · Roblox
    233 votes
15. An IDOR that can lead to enumeration of a user and disclosure of email and phone number within cashierInsecure Direct Object Reference (IDOR) · high · Unikrn
    232 votes
16. IDOR delete any Tickets on ads.tiktok.comInsecure Direct Object Reference (IDOR) · high · TikTok
    216 votes
17. I.D.O.R To Order,Book,Buy,reserve On YELP FOR FREE (UNAUTHORIZED USE OF OTHER USER'S CREDIT CARD)Insecure Direct Object Reference (IDOR) · critical · Yelp
    214 votes
18. IDOR vulnerability in unreleased HackerOne Copilot featureInsecure Direct Object Reference (IDOR) · medium · HackerOne
    210 votes
19. IDOR allows an attacker to modify the links of any userInsecure Direct Object Reference (IDOR) · high · Reddit
    208 votes
20. IDOR when editing users leads to Account Takeover without User Interaction at CrowdSignalInsecure Direct Object Reference (IDOR) · critical · Automattic
    202 votes
21. IDOR on GraphQL queries BillingDocumentDownload and BillDetailsInsecure Direct Object Reference (IDOR) · medium · Shopify
    $5,000187 votes
22. IDOR Vulnerability at AddTagToAssets operation nameInsecure Direct Object Reference (IDOR) · medium · HackerOne
    178 votes
23. IDOR leads to Edit Anyone's Blogs / WebsitesInsecure Direct Object Reference (IDOR) · high · Automattic
    177 votes
24. Unauthorized Access to TikTok Account [Private Videos] via API EndpointInsecure Direct Object Reference (IDOR) · medium · TikTok
    167 votes
25. Getting access of mod logs from any public or restricted subreddit with IDOR vulnerabilityInsecure Direct Object Reference (IDOR) · high · Reddit
    $5,000163 votes
26. Unreleased CTF Levels are Revealed on /group/user/ID1?user=USERID endpointInsecure Direct Object Reference (IDOR) · low · HackerOne
    161 votes
27. Disclose Hidden Comments on Media Section of hub.vroid.comInsecure Direct Object Reference (IDOR) · medium · pixiv
    $500149 votes
28. Email change or personal data change on the account.Insecure Direct Object Reference (IDOR) · critical · Stripe
    $3,000149 votes
29. Importing GitLab project archives can replace uploads of other usersInsecure Direct Object Reference (IDOR) · high · GitLab
    148 votes
30. IDOR vulnerability (Price manipulation)Insecure Direct Object Reference (IDOR) · medium · Acronis
    146 votes
31. Sale cancellations from other sellers without restrictionsInsecure Direct Object Reference (IDOR) · critical · MercadoLibre
    144 votes
32. Missing ownership check on remote wipe endpointInsecure Direct Object Reference (IDOR) · high · Nextcloud
    $500141 votes
33. IDOR and statistics leakage in Orders Insecure Direct Object Reference (IDOR) · medium · X / xAI
    $289141 votes
34. IDOR at mtnmobad.mtnbusiness.com.ng leads to PII leakage. Insecure Direct Object Reference (IDOR) · critical · MTN Group
    135 votes
35. Private objects exposed through project importInsecure Direct Object Reference (IDOR) · critical · GitLab
    $20,000133 votes
36. IDOR on ads.tiktok.com Allows Unauthorized Product AdditionInsecure Direct Object Reference (IDOR) · low · TikTok
    $500131 votes
37. IDOR on in-app hardcoded zombie endpoint Insecure Direct Object Reference (IDOR) · medium · Bykea
    128 votes
38. IDOR in https://3d.cs.money/Insecure Direct Object Reference (IDOR) · medium · CS Money
    127 votes
39. IDOR for changing privacy settings on any memoriesInsecure Direct Object Reference (IDOR) · high · TikTok
    123 votes
40. IDOR leads to leak analytics of any restaurantInsecure Direct Object Reference (IDOR) · medium · Uber
    123 votes
41. IDOR Exposes All Machine Learning ModelsInsecure Direct Object Reference (IDOR) · medium · GitLab
    $1,160117 votes
42. Unauthorized User can View Subscribers of Other Users NewslettersInsecure Direct Object Reference (IDOR) · high · LinkedIn
    117 votes
43. Unauthorized access to resumes stored on LinkedInInsecure Direct Object Reference (IDOR) · high · LinkedIn
    112 votes
44. IDOR leads to See analytics of Loyalty Program in any restaurant.Insecure Direct Object Reference (IDOR) · medium · Uber
    112 votes
45. [IDOR] Improper Access Control on Embedded Submission FormInsecure Direct Object Reference (IDOR) · low · HackerOne
    $2,500110 votes
46. IDOR on TikTok Ads EndpointInsecure Direct Object Reference (IDOR) · medium · TikTok
    109 votes
47. Cross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modificationInsecure Direct Object Reference (IDOR) · medium · GitHub
    108 votes
48. Broken Access Control (IDOR) in Booking Detail and Bids Could Leads to Sensitive Information DisclosureInsecure Direct Object Reference (IDOR) · high · Bykea
    108 votes
49. Multiple IDORs in family pairing apiInsecure Direct Object Reference (IDOR) · high · TikTok
    107 votes
50. User can pay using archived price by manipulating the request sent to `POST /v1/payment_pages/for_plink`Insecure Direct Object Reference (IDOR) · medium · Stripe
    100 votes
51. IDOR vulnerability reveals additional informationInsecure Direct Object Reference (IDOR) · critical · Semrush
    99 votes
52. IDOR allows an attacker to delete anyone's featured photo.Insecure Direct Object Reference (IDOR) · medium · LinkedIn
    99 votes
53. █████████ when adding branches to your accountInsecure Direct Object Reference (IDOR) · critical · Mars
    98 votes
54. An attacker can submit arbitrary projects to their service accounts and obtain full information on projects of other users.Insecure Direct Object Reference (IDOR) · high · LinkedIn
    94 votes
55. IDOR when moving contents at CrowdSignalInsecure Direct Object Reference (IDOR) · high · Automattic
    94 votes
56. Missing Access Control in MigrationFile allows attacker to upload files to any MigrationInsecure Direct Object Reference (IDOR) · high · GitHub
    92 votes
57. IDOR - Leaking of team data (name, email, ID, member ID) via POST /api/v1/graphql `FetchMemberships` operationInsecure Direct Object Reference (IDOR) · medium · Tools for Humanity
    $50091 votes
58. Security@ email forwarding and Embedded Submission drafts can be used to obtain copy of deleted attachments from other HackerOne usersInsecure Direct Object Reference (IDOR) · high · HackerOne
    91 votes
59. Private circle can be added to another circle via API despite visibility restrictionInsecure Direct Object Reference (IDOR) · low · Nextcloud
    $15087 votes
60. IDOR to make someone attend or leave an eventInsecure Direct Object Reference (IDOR) · medium · LinkedIn
    87 votes
61. IDOR to view order information of users and personal informationInsecure Direct Object Reference (IDOR) · medium · Affirm
    $50087 votes
62. IDOR vulnerability leads to Deleting message after leaving/getting banned from group using message IDInsecure Direct Object Reference (IDOR) · low · Rocket.Chat
    86 votes
63. WebAuthn app was updated based on public keyInsecure Direct Object Reference (IDOR) · low · Nextcloud
    84 votes
64. IDOR on Delete Email address featuresInsecure Direct Object Reference (IDOR) · high · Mozilla
    84 votes
65. Attackers can use TRIAL Premium only by paying **IDR 10,000.00** from the original price of `IDR462,400.00` per monthInsecure Direct Object Reference (IDOR) · high · LinkedIn
    84 votes
66. Cross-Tenant IDOR ( graphql `AddRulesToPixelEvents` query ) allowing to add, update, and delete rules of any Pixel events on the platformInsecure Direct Object Reference (IDOR) · high · TikTok
    84 votes
67. Unauthorized Access to Private Video Description via Translation API for Private AccountsInsecure Direct Object Reference (IDOR) · low · TikTok
    82 votes
68. Insecure Direct Object Reference (IDOR) in GraphQL deleteProfileImages MutationInsecure Direct Object Reference (IDOR) · high · Autodesk
    80 votes
69. Improper Access Control Allows Trip Hijacking and Passenger/Driver PII DisclosureInsecure Direct Object Reference (IDOR) · medium · Bykea
    80 votes
70. IDOR on HackerOne Feedback ReviewInsecure Direct Object Reference (IDOR) · low · HackerOne
    79 votes
71. Access to Deactivated LinkedIn Company Pages via Competitor Analytics APIInsecure Direct Object Reference (IDOR) · medium · LinkedIn
    77 votes
72. IDOR leading unauthenticated attacker to download documents discloses PII of users and soldiers via https://www.█████████/Download.aspx?id= [HtUS]Insecure Direct Object Reference (IDOR) · high · U.S. Dept Of Defense
    $50077 votes
73. Unauthenticated access to private files on app.fizzy.do via Active Storage URLs leads to information disclosureInsecure Direct Object Reference (IDOR) · low · Basecamp
    $10076 votes
74. Ability to increase any customer offered fare (BAC)Insecure Direct Object Reference (IDOR) · medium · Bykea
    76 votes
75. Reporter, external users, collaborators can mark sent swag awarded to reporter as unsentInsecure Direct Object Reference (IDOR) · medium · HackerOne
    76 votes
76. Autotranslate DDP Method Exposes Private Messages Without Authentication or Room Access CheckInsecure Direct Object Reference (IDOR) · high · Rocket.Chat
    74 votes
77. IDOR allows information disclosureInsecure Direct Object Reference (IDOR) · high · Semrush
    74 votes
78. IDOR the ability to view support tickets of any user on seller platformInsecure Direct Object Reference (IDOR) · medium · TikTok
    $2,50074 votes
79. TaskProcessing callback authorization bypass allows ex-members to post as Assistant Talk BotInsecure Direct Object Reference (IDOR) · medium · Nextcloud
    73 votes
80. Insecure Direct Object Reference (IDOR) Vulnerability in Autodesk User ProfileInsecure Direct Object Reference (IDOR) · medium · Autodesk
    73 votes
81. **Unauthenticated IDOR allows modification of payment customer billing information**Insecure Direct Object Reference (IDOR) · high · Weblate
    72 votes
82. Reddit talk promotion offers don't expire, allowing users to accept them after being demotedInsecure Direct Object Reference (IDOR) · medium · Reddit
    72 votes
83. A staff member with no permissions can edit Store Customer EmailInsecure Direct Object Reference (IDOR) · medium · Shopify
    $1,50072 votes
84. Add labels to arbitrary issues/prs & compromise github actions label checksInsecure Direct Object Reference (IDOR) · medium · GitHub
    71 votes
85. IDOR Vulnerability Allowing Unauthorized Profile Picture ChangeInsecure Direct Object Reference (IDOR) · medium · Autodesk
    69 votes
86. Authentication Bypass in Subscription Management EndpointInsecure Direct Object Reference (IDOR) · critical · lemlist
    68 votes
87. Insecure Direct Object Reference allows Crew Invite deletionInsecure Direct Object Reference (IDOR) · medium · Rockstar Games
    67 votes
88. Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.coInsecure Direct Object Reference (IDOR) · critical · X / xAI
    67 votes
89. IDOR in Report CSV export discloses the IDs of Custom Field Attributes of ProgramsInsecure Direct Object Reference (IDOR) · low · HackerOne
    67 votes
90. IDOR to delete images from other storesInsecure Direct Object Reference (IDOR) · low · Eternal
    $60067 votes
91. Upload profile photo and Pets addition - IDORInsecure Direct Object Reference (IDOR) · high · Mars
    66 votes
92. Insecure direct Object Reference(Horizontal Escalation)Insecure Direct Object Reference (IDOR) · medium · MTN Group
    66 votes
93. IDOR with Geolocation data not stripped from imagesInsecure Direct Object Reference (IDOR) · high · IRCCloud
    $20066 votes
94. Can access the job name, creator name and can report any draft/under review/rejected jobInsecure Direct Object Reference (IDOR) · medium · LinkedIn
    65 votes
95. account takeover on 3.0.1 versionInsecure Direct Object Reference (IDOR) · critical · Rocket.Chat
    65 votes
96. Any user with access to program can resume and suspend HackerOne GatewayInsecure Direct Object Reference (IDOR) · medium · HackerOne
    65 votes
97. Web protection component in Anti-Virus products family uses predictable links for certificate warningsInsecure Direct Object Reference (IDOR) · medium · Kaspersky
    65 votes
98. IDOR leads to PII LeakInsecure Direct Object Reference (IDOR) · medium · U.S. Dept Of Defense
    64 votes
99. View Repo and Title of Any Private Check RunInsecure Direct Object Reference (IDOR) · medium · GitHub
    64 votes
100. Chain of IDORs Between U4B and Vouchers APIs Allows Attackers to View and Modify Program/Voucher Policies and to Obtain Organization Employees' PIIInsecure Direct Object Reference (IDOR) · high · Uber
     64 votes