Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches

Cybersecurity agencies in Australia and the U.S. have published a joint cybersecurity advisory warning against security flaws in web applications that could be exploited by malicious actors to orchestrate data breach incidents and steal confidential data.
This includes a specific class of bugs called Insecure Direct Object Reference (IDOR), a type of access control flaw that occurs when an

advisory applications australia breach breaches bugs called class confidential cybersecurity cybersecurity advisory data data breach data breaches exploited flaws idor incidents insecure insecure direct object reference malicious malicious actors object reference security security flaws steal warning web web applications