Insecure direct object reference

Summary

Insecure direct object reference is a security weakness^[1].

Key Facts

• Insecure direct object reference's instance of is recorded as security weakness^[2].
• Insecure direct object reference's instance of is recorded as CWE weakness^[3].
• Insecure direct object reference is a type of vulnerability^[4].
• Insecure direct object reference is part of OWASP Top 10^[5].
• Insecure direct object reference's described at URL is recorded as https://www.invicti.com/learn/insecure-direct-object-references-idor/^[6].
• Insecure direct object reference's described at URL is recorded as https://www.imperva.com/learn/application-security/insecure-direct-object-reference-idor/^[7].
• Insecure direct object reference's described at URL is recorded as https://portswigger.net/web-security/access-control/idor^[8].

Body

Definition and Type

Recorded instance of include security weakness^[2] and CWE weakness^[3]. Insecure direct object reference is a type of vulnerability^[4].

Use and Application

Insecure direct object reference is part of OWASP Top 10^[5].