Vulnerability
vulnerability:insecure_direct_object_reference
Also: IDOR
An access-control flaw that allowed one user to retrieve another user's private messages by changing a message identifier.
An access-control flaw that allowed one user to retrieve another user's private messages by changing a message identifier.
“the official term is insecure direct object reference”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Chris Monteiro | Derived | 156 |
| incoming | EXPLOITS | Chris Monteiro | Derived | 156 |
Chris Monteiro EXPLOITS insecure direct object reference
Chris exploited an insecure direct object reference by changing an object identifier and retrieving other users' private messages.
Derived Confidence 99% · Jack Rhysider EP 156 Details
“One user should never be able to access another user’s private data such as private messages like this.”
“he just changed one number in the URL.”
insecure direct object reference DISCOVERED_BY Chris Monteiro
Chris discovered the access-control flaw while inspecting Besa Mafia message URLs.
Derived Confidence 98% · Chris Monteiro EP 156 Details
“I looked at my order for taking out Bob the Builder, and I looked at the address bar, and I saw that there was an ID in the address bar.”