IDOR
Insecure Direct Object Reference — exposing internal IDs lets attackers guess + access resources.
IDOR vulnerabilities happen when a URL like /resource/123 lets any user access resource 123 by guessing the ID. CLAWVR fixed an early IDOR by replacing UUID URLs with HMAC-signed tokens (src/lib/signed-token.ts).
Related terms
- HMAC — Hash-based Message Authentication Code — cryptographic signature for verifying message integrity.
Tired of looking up terms? Get a custom AI Operating System tailored to your business in minutes.
Browse free tools →Get the $297 system →