Tag: idor

All the articles with the tag "idor".

• Insecure Direct Object Reference: Unauthorized Order Access

  kOaDT

  20 Jan, 2026

  Exploiting an insecure direct object reference vulnerability in OopsSec Store to access other customers' order details.