logo hsb.horse
← Back to glossary index

Glossary

IDOR (Insecure Direct Object Reference)

IDOR is a vulnerability where direct object identifiers allow access to resources without proper authorization checks.

Published: • Updated:
#security #web #idor #authorization

Translations

German French Japanese Portuguese Korean

IDOR occurs when user-provided IDs are trusted without object-level authorization. Effective mitigation requires authorization checks on every read/write path.