IDOR

Insecure Direct Object Reference: reaching someone else's record by changing an identifier in a request that the server fails to check ownership of.

Learn it hands-on

• Broken Access Control Medium