[KongchangAI]
Unverified50% confidenceFactExact time

IDOR arises because the application directly uses user-controllable input (such as URL parameters or IDs in form fields) to locate internal objects, yet does not verify on the server side whether the current user is authorized to access that object.

1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/1052211
API
curl https://kongchang.com/api/v1/knowledge/claims/1052211
MCP
get_claim(id=1052211)