Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

CVEs (2,514)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-8297 1Nextcloud 1Deck Jun 17, 2026 Feb 23, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a previous deleted user.
CVE-2021-21022 1Magento 1Magento Jun 17, 2026 Feb 11, 2021 N/A· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object reference (IDOR) in the product module. Successful exploitation could lead to unauthorized...Show more Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object reference (IDOR) in the product module. Successful exploitation could lead to unauthorized access to restricted resources.Show less
CVE-2020-13462 1Tufin 1Securetrack Jun 17, 2026 Feb 9, 2021 N/A· v4 5.7 MEDIUM· v3 2.7 LOW· v2 Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.
CVE-2020-16194 1Store Opart 1Op'art Devis Jun 17, 2026 Feb 4, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the deli...Show more An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2. Unauthenticated attackers can have access to any user's invoice and delivery address by exploiting an IDOR on the delivery_address and invoice_address fields.Show less
CVE-2021-26024 1Nagios 1Favorites Jun 17, 2026 Feb 3, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account.
CVE-2020-36231 1Atlassian 4Jira Jira Data CenterJira Server+1 more Jun 17, 2026 Feb 2, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected...Show more Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.Show less
CVE-2020-23449 1Newbee Mall Project 1Newbee Mall Jun 17, 2026 Jan 26, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID.
CVE-2020-29446 1Atlassian 2Crucible Fisheye Jun 17, 2026 Jan 18, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory. The affected versions are before vers...Show more Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory. The affected versions are before version 4.8.5.Show less
CVE-2021-21013 1Adobe 1Magento Jun 17, 2026 Jan 13, 2021 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sens...Show more Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user's account.Show less
CVE-2021-21012 1Adobe 2Magento Commerce Magento Open Source Jun 17, 2026 Jan 13, 2021 N/A· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitiv...Show more Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.Show less
CVE-2020-4918 1Ibm 1Cloud Pak System Jun 17, 2026 Jan 4, 2021 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392.
CVE-2020-35849 1Mantisbt 1Mantisbt Jun 17, 2026 Dec 30, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaini...Show more An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnote_id parameter.Show less
CVE-2020-29156 1Woocommerce 1Woocommerce Jun 17, 2026 Dec 27, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action.
CVE-2020-26178 1Tangro 1Business Workflow Jun 17, 2026 Dec 18, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
CVE-2020-26175 1Tangro 1Business Workflow Jun 17, 2026 Dec 18, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
CVE-2020-26173 1Tangro 1Business Workflow Jun 17, 2026 Dec 18, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authentication is required.
CVE-2020-26171 1Tangro 1Business Workflow Jun 17, 2026 Dec 18, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do not belong to them.
CVE-2020-20183 1Zyxel 1P1302 T10 V3 Firmware Jun 17, 2026 Dec 14, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages.
CVE-2020-13357 1Gitlab 1Gitlab Jun 17, 2026 Dec 11, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user list corresponding to a feature flag in a project.
CVE-2020-27663 1Glpi Project 1Glpi Jun 17, 2026 Nov 26, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).

Previous 1...119120121...126 Next