Loading HuntDB...

Upload profile photo and Pets addition - IDOR

High
M
Mars
Submitted None

Team Summary

Official summary from Mars

An Insecure Direct Object Reference (IDOR) vulnerability is discovered on the website ██████████. Through this vulnerability, it is possible for an attacker to manipulate any user account by uploading profile photos and adding pets to victim accounts. The vulnerability exists in two main functionalities: the profile photo upload feature and the pet addition system. By manipulating specific parameters in the requests, unauthorized modifications to other users' accounts can be performed without proper authorization checks

Reported by cholo_

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Insecure Direct Object Reference (IDOR)