Joint Advisory Warns of Threat From IDOR Vulnerabilities

This Security Boulevard article reports on a joint ACSC, CISA and NSA advisory warning that insecure direct object reference (IDOR) flaws pose a major threat. Casey Ellis, founder and CTO of Bugcrowd, is quoted calling IDOR simple to abuse, since editing a number in a user's URL can expose another user's data.