️Insecure Direct Object Reference (IDOR) — Unauthorized Account Access

بسم الله والصلاة والسلام على رسول الله ﷺ❤️، اللهم علِّمنا ما ينفعنا، وانفعنا بما علَّمتنا، وزِدنا علمًا نافعًا

📌 Vulnerability Details

Title: IDOR Leads to Unauthorized Account Access .

Vulnerability Rating Taxonomy (VRT): P1 — Broken Access Control → IDOR

📝 Description

During my testing of [programe-target.com] , I discovered an Insecure Direct Object Reference (IDOR) vulnerability that allowed unauthorized access to other users’ accounts by simply modifying a numerical identifier in the URL. This issue stemmed from improper access control validation, meaning that an attacker could directly access another user’s dashboard without authentication.