Insecure Direct Object References (IDOR)

2023-05-2602:15:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

org.apache.inlong

vulnerability

insecure direct object references

lack of permission verification

attacker

access files

EPSS

0.003

Percentile

70.8%

JSON

org.apache.inlong is vulnerable to Insecure Direct Object References (IDOR). The vulnerability exists due to a lack of permission verification for stream sources, which allows an attacker to access files or directories of external users and delete, edit, stop, and start others’ sources.