DerScanner
Home / Vulnerability Database / Scala : Insecure direct object references
Scala

Scala : Insecure direct object references

Classification

OWASP ASVS
Access ControlAccess ControlAccess ControlAccess ControlAccess Control
CWE
CWE-639

Overview

Insecure Direct Object Reference is an access control problem which allows an attacker to view data by manipulating an identifier (for example, a document or account number).

Direct object references are maps of an identifier to a resource; they are insecure direct object references if they allow an unauthorized user to access data.

References

  1. Insecure Direct Object Reference
  2. CWE-639: Authorization Bypass Through User-Controlled Key
  3. What are insecure direct object references (IDOR)?
MEDIUM

DerScanner Severity Score

Do you want to fix Scala : Insecure direct object references in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length