Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Insecure Direct Object Reference (IDOR)

🗓️ 09 Jan 2025 04:33:23Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 4 Views

Khoj is vulnerable to Insecure Direct Object Reference allowing unauthorized subscription modifications.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2024-52294
30 Dec 202416:20
–circl
CNNVD		Khoj 安全漏洞
30 Dec 202400:00
–cnnvd
CVE		CVE-2024-52294
30 Dec 202416:14
–cve
Cvelist		CVE-2024-52294 khoj has an IDOR in subscription management that allows unauthorized subscription modifications
30 Dec 202416:14
–cvelist
EUVD		EUVD-2024-3591
3 Oct 202520:07
–euvd
Github Security Blog		khoj has an IDOR in subscription management allows unauthorized subscription modifications
30 Dec 202416:12
–github
NVD		CVE-2024-52294
30 Dec 202417:15
–nvd
OSV		CVE-2024-52294 khoj has an IDOR in subscription management that allows unauthorized subscription modifications
30 Dec 202416:14
–osv
OSV		GHSA-HQ4H-W933-JM6C khoj has an IDOR in subscription management allows unauthorized subscription modifications
30 Dec 202416:12
–osv
Positive Technologies		PT-2024-35160 · Khoj · Khoj
30 Dec 202400:00
–ptsecurity
Rows per page
Vulners
Node
khojkhojRange1.0.0–1.28.4.dev94python
OR
khojkhojMatch1.0python
OR
khojkhojMatch1.16.1.dev15python
OR
khojkhojMatch1.16.1.dev16python
OR
khojkhojMatch1.16.1.dev25python
OR
khojkhojMatch1.16.1.dev26python
OR
khojkhojMatch1.16.1.dev47python
OR
khojkhojMatch1.17.0python
OR
khojkhojMatch1.17.1.dev216python
OR
khojkhojMatch1.17.1.dev217python
OR
khojkhojMatch1.17.1.dev218python
OR
khojkhojMatch1.17.1.dev219python
OR
khojkhojMatch1.17.1.dev220python
OR
khojkhojMatch1.17.1.dev221python
OR
khojkhojMatch1.17.1.dev222python
OR
khojkhojMatch1.17.1.dev223python
OR
khojkhojMatch1.17.1.dev229python
OR
khojkhojMatch1.17.1.dev233python
OR
khojkhojMatch1.20.0python
OR
khojkhojMatch1.20.1.dev1python
OR
khojkhojMatch1.20.1.dev11python
OR
khojkhojMatch1.20.1.dev2python
OR
khojkhojMatch1.20.1.dev3python
OR
khojkhojMatch1.20.1.dev4python
OR
khojkhojMatch1.20.1.dev5python
OR
khojkhojMatch1.20.1.dev6python
OR
khojkhojMatch1.20.2python
OR
khojkhojMatch1.20.2.dev1python
OR
khojkhojMatch1.20.2.dev5python
OR
khojkhojMatch1.20.2.dev6python
OR
khojkhojMatch1.20.2.dev8python
OR
khojkhojMatch1.20.3python
OR
khojkhojMatch1.20.3.dev1python
OR
khojkhojMatch1.20.3.dev10python
OR
khojkhojMatch1.20.3.dev11python
OR
khojkhojMatch1.20.3.dev13python
OR
khojkhojMatch1.20.3.dev14python
OR
khojkhojMatch1.20.3.dev15python
OR
khojkhojMatch1.20.3.dev2python
OR
khojkhojMatch1.20.4python
OR
khojkhojMatch1.20.4.dev1python
OR
khojkhojMatch1.20.4.dev13python
OR
khojkhojMatch1.20.4.dev2python
OR
khojkhojMatch1.20.4.dev5python
OR
khojkhojMatch1.20.4.dev6python
OR
khojkhojMatch1.20.4.dev8python
OR
khojkhojMatch1.20.4.dev9python
OR
khojkhojMatch1.20.5.dev1python
OR
khojkhojMatch1.20.5.dev10python
OR
khojkhojMatch1.20.5.dev15python
OR
khojkhojMatch1.20.5.dev16python
OR
khojkhojMatch1.20.5.dev17python
OR
khojkhojMatch1.20.5.dev18python
OR
khojkhojMatch1.20.5.dev22python
OR
khojkhojMatch1.20.5.dev8python
OR
khojkhojMatch1.21.0python
OR
khojkhojMatch1.21.1python
OR
khojkhojMatch1.21.1.dev1python
OR
khojkhojMatch1.21.1.dev2python
OR
khojkhojMatch1.21.2python
OR
khojkhojMatch1.21.2.dev2python
OR
khojkhojMatch1.21.3python
OR
khojkhojMatch1.21.3.dev5python
OR
khojkhojMatch1.21.3.dev6python
OR
khojkhojMatch1.21.4python
OR
khojkhojMatch1.21.4.dev1python
OR
khojkhojMatch1.21.4.dev4python
OR
khojkhojMatch1.21.4.dev8python
OR
khojkhojMatch1.21.4.dev9python
OR
khojkhojMatch1.21.5python
OR
khojkhojMatch1.21.5.dev1python
OR
khojkhojMatch1.21.5.dev5python
OR
khojkhojMatch1.21.6python
OR
khojkhojMatch1.21.6.dev13python
OR
khojkhojMatch1.21.6.dev14python
OR
khojkhojMatch1.21.6.dev6python
OR
khojkhojMatch1.21.7.dev1python
OR
khojkhojMatch1.21.7.dev4python
OR
khojkhojMatch1.21.7.dev6python
OR
khojkhojMatch1.21.7.dev7python
OR
khojkhojMatch1.21.7.dev9python
OR
khojkhojMatch1.22.0python
OR
khojkhojMatch1.22.1python
OR
khojkhojMatch1.22.1.dev1python
OR
khojkhojMatch1.22.2python
OR
khojkhojMatch1.22.2.dev10python
OR
khojkhojMatch1.22.2.dev11python
OR
khojkhojMatch1.22.2.dev12python
OR
khojkhojMatch1.22.2.dev9python
OR
khojkhojMatch1.22.3python
OR
khojkhojMatch1.22.3.dev5python
OR
khojkhojMatch1.22.3.dev6python
OR
khojkhojMatch1.22.4.dev1python
OR
khojkhojMatch1.22.4.dev12python
OR
khojkhojMatch1.22.4.dev13python
OR
khojkhojMatch1.22.4.dev2python
OR
khojkhojMatch1.22.4.dev6python
OR
khojkhojMatch1.22.4.dev7python
OR
khojkhojMatch1.23.0python
OR
khojkhojMatch1.23.1python
OR
khojkhojMatch1.23.1.dev1python
OR
khojkhojMatch1.23.2python
OR
khojkhojMatch1.23.2.dev1python
OR
khojkhojMatch1.23.2.dev2python
OR
khojkhojMatch1.23.3python
OR
khojkhojMatch1.23.3.dev1python
OR
khojkhojMatch1.23.3.dev18python
OR
khojkhojMatch1.23.3.dev2python
OR
khojkhojMatch1.23.3.dev3python
OR
khojkhojMatch1.23.3.dev4python
OR
khojkhojMatch1.23.3.dev5python
OR
khojkhojMatch1.23.3.dev7python
OR
khojkhojMatch1.23.4.dev1python
OR
khojkhojMatch1.23.4.dev11python
OR
khojkhojMatch1.23.4.dev12python
OR
khojkhojMatch1.23.4.dev2python
OR
khojkhojMatch1.23.4.dev3python
OR
khojkhojMatch1.23.4.dev4python
OR
khojkhojMatch1.23.4.dev7python
OR
khojkhojMatch1.24.0python
OR
khojkhojMatch1.24.1python
OR
khojkhojMatch1.24.1.dev14python
OR
khojkhojMatch1.24.1.dev3python
OR
khojkhojMatch1.24.1.dev4python
OR
khojkhojMatch1.24.1.dev5python
OR
khojkhojMatch1.24.1.dev7python
OR
khojkhojMatch1.24.1.dev8python
OR
khojkhojMatch1.24.1.dev9python
OR
khojkhojMatch1.24.2.dev10python
OR
khojkhojMatch1.24.2.dev14python
OR
khojkhojMatch1.24.2.dev15python
OR
khojkhojMatch1.24.2.dev16python
OR
khojkhojMatch1.24.2.dev19python
OR
khojkhojMatch1.24.2.dev2python
OR
khojkhojMatch1.24.2.dev28python
OR
khojkhojMatch1.24.2.dev3python
OR
khojkhojMatch1.24.2.dev31python
OR
khojkhojMatch1.24.2.dev33python
OR
khojkhojMatch1.24.2.dev34python
OR
khojkhojMatch1.24.2.dev4python
OR
khojkhojMatch1.24.2.dev6python
OR
khojkhojMatch1.24.2.dev7python
OR
khojkhojMatch1.24.2.dev8python
OR
khojkhojMatch1.24.2.dev9python
OR
khojkhojMatch1.25.0python
OR
khojkhojMatch1.25.1.dev1python
OR
khojkhojMatch1.25.1.dev12python
OR
khojkhojMatch1.25.1.dev14python
OR
khojkhojMatch1.25.1.dev19python
OR
khojkhojMatch1.25.1.dev2python
OR
khojkhojMatch1.25.1.dev33python
OR
khojkhojMatch1.25.1.dev34python
OR
khojkhojMatch1.25.1.dev7python
OR
khojkhojMatch1.25.1.dev9python
OR
khojkhojMatch1.26.0python
OR
khojkhojMatch1.26.1python
OR
khojkhojMatch1.26.1.dev1python
OR
khojkhojMatch1.26.1.dev3python
OR
khojkhojMatch1.26.2python
OR
khojkhojMatch1.26.2.dev1python
OR
khojkhojMatch1.26.3python
OR
khojkhojMatch1.26.3.dev1python
OR
khojkhojMatch1.26.3.dev3python
OR
khojkhojMatch1.26.4python
OR
khojkhojMatch1.26.4.dev1python
OR
khojkhojMatch1.26.4.dev2python
OR
khojkhojMatch1.26.5.dev1python
OR
khojkhojMatch1.26.5.dev15python
OR
khojkhojMatch1.26.5.dev16python
OR
khojkhojMatch1.26.5.dev27python
OR
khojkhojMatch1.26.5.dev29python
OR
khojkhojMatch1.26.5.dev32python
OR
khojkhojMatch1.26.5.dev34python
OR
khojkhojMatch1.26.5.dev35python
OR
khojkhojMatch1.26.5.dev37python
OR
khojkhojMatch1.26.5.dev43python
OR
khojkhojMatch1.26.5.dev44python
OR
khojkhojMatch1.27.0python
OR
khojkhojMatch1.27.1python
OR
khojkhojMatch1.27.1.dev1python
OR
khojkhojMatch1.27.2.dev1python
OR
khojkhojMatch1.27.2.dev12python
OR
khojkhojMatch1.27.2.dev13python
OR
khojkhojMatch1.27.2.dev130python
OR
khojkhojMatch1.27.2.dev14python
OR
khojkhojMatch1.27.2.dev15python
OR
khojkhojMatch1.27.2.dev16python
OR
khojkhojMatch1.27.2.dev167python
OR
khojkhojMatch1.27.2.dev18python
OR
khojkhojMatch1.27.2.dev2python
OR
khojkhojMatch1.27.2.dev29python
OR
khojkhojMatch1.28.0python
OR
khojkhojMatch1.28.1python
OR
khojkhojMatch1.28.1.dev1python
OR
khojkhojMatch1.28.2python
OR
khojkhojMatch1.28.2.dev1python
OR
khojkhojMatch1.28.3python
OR
khojkhojMatch1.28.3.dev1python
OR
khojkhojMatch1.28.4.dev1python
OR
khojkhojMatch1.28.4.dev11python
OR
khojkhojMatch1.28.4.dev12python
OR
khojkhojMatch1.28.4.dev13python
OR
khojkhojMatch1.28.4.dev2python
OR
khojkhojMatch1.28.4.dev22python
OR
khojkhojMatch1.28.4.dev23python
OR
khojkhojMatch1.28.4.dev24python
OR
khojkhojMatch1.28.4.dev3python
OR
khojkhojMatch1.28.4.dev7python
OR
khojkhojMatch1.28.4.dev71python
OR
khojkhojMatch1.28.4.dev72python
OR
khojkhojMatch1.28.4.dev76python
OR
khojkhojMatch1.28.4.dev77python
OR
khojkhojMatch1.28.4.dev78python
OR
khojkhojMatch1.28.4.dev79python
OR
khojkhojMatch1.28.4.dev81python
OR
khojkhojMatch1.28.4.dev89python
OR
khojkhojMatch1.28.4.dev90python
OR
khojkhojMatch1.28.4.dev92python
OR
khojkhojMatch1.28.4.dev93python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 07:45Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.14.3
EPSS0.00115
SSVC
insecure direct object referenceaccess controlsupdate subscriptionauthorization checksuser subscription.
4