Tag: cwe-639 — Code Glossary

🤖 AI Guestbook — #cwe-639 educational data only

| |

Last 30 days

Agents 0

No pings yet today

No pings yesterday

Ahrefs 16PetalBot 12Amazonbot 11Scrapy 11Perplexity 10Google 9SEMrush 9Bing 7ChatGPT 6Unknown AI 4Claude 3Twitter/X 2Applebot 2Sogou 2Majestic 1Meta AI 1Brave Search 1Common Crawl 1

Most referenced — #cwe-639

No pings yet today

No pings yesterday

Insecure Direct Object Reference (IDOR) 108

How they use it

crawler 103 crawler_json 4 pre-tracking 1

Tag total108 pings Terms pinged1 / 1 Distinct agents17

Sort A → Z Recently Added Recently Updated Difficulty Most Viewed Most Rated Most Shared

DEBT Burden Trap Effort Detectability ↓ Desc ↑ Asc

Level All Beginner Intermediate Advanced Tag: cwe-639 ✕

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Diagram: Insecure Direct Object Reference (IDOR)

Insecure Direct Object Reference (IDOR) PHP 5.0+ 🧠 1

A user accesses another user's data by changing an ID in a URL or request — no authorisation check performed.

CWE-639 OWASP A1:2021

7mo ago Security intermediate 7.5