• A type of access control vulnerability in digital security. An IDOR exists when a web application or application programming interface (API) uses an identifier for direct access to an object in an internal database, but does not check for access control or authentication. For example, if the request URL sent to a website directly uses an enumerated unique identifier (such as “https://example.com/doc/1234”), it may provide an exploit for unintended access to all records. A directory traversal attack is considered a special case of an IDOR. ← Wikipedia

1. Related terms: Access control, Encapsulation, Website application programming interface, Universally unique identifier
2. Previous term: Input/output operations per second
3. Next term: Insertion mode
4. Random term: Web analytics (webglossary.info/random 🎲)