Cybersecurity

IDOR

/aɪ diː əʊ ɑː/

Definition

Insecure Direct Object Reference — an access control vulnerability where changing an ID parameter accesses another user's data.

Example in context

"Changing /api/orders/123 to /api/orders/124 returned another user's order — classic IDOR, missing authorisation check."

Practice this term

Master IDOR in context by working through exercises in the Cybersecurity module. You'll see the term used in real engineering scenarios with multiple-choice, fill-in-the-blank, and matching drills.