In this post, we covered insecure direct object reference vulnerability which is one of the top 10 on the list of OWASP.
By definition, IDOR or Insecure Direct Object Reference (called IDOR from here) occurs when an application exposes a reference to an internal implementation object. Using this way, it reveals the real identifier and format/pattern used of the element in the storage backend side. The most common example of it (although is not limited to this one) is a record identifier in a storage system (database, filesystem and so on).
Show Comments
