Skip to content

A4 IDOR

Jump to bottom
Ken Johnson edited this page Dec 24, 2017 · 2 revisions

Insecure Direct Object Reference

© The Open Web Application Security Project - OWASP, 2015

Sections are divided by their OWASP Top Ten label (A1-A10) and marked as R4 and R5 for Rails 4 and 5.

Clone this wiki locally