Cyber Security Interview Questions and Answers › Cyber Security
What is IDOR?
IDOR = Insecure Direct Object Reference. The app shows data by an ID but never checks if it is yours. It is part of Broken Access Control, number 1 on the OWASP list.
Read card text
What this card says
IDOR = Insecure Direct Object Reference. The app shows data by an ID but never checks if it is yours. It is part of Broken Access Control, number 1 on the OWASP list.
Learn more in the lesson: 29.5 A01 Broken Access Control and IDOR