Tag: idor

All the articles with the tag "idor".

• Insecure Direct Object Reference: Unauthorized Order Access

  kOaDT

  20 Jan, 2026

  How changing one number in the URL lets you read anyone's order on OopsSec Store.