IDOR · Question 2 of 12
What is an IDOR hole (insecure direct object reference)?
1 answer is correct. Easy
Show answer
Answer
- D An object is loaded by ID without an ownership check
Explanation
If an application loads an object directly via ?id=123 without checking whether it belongs to the requester, anyone can retrieve foreign records.