🎯 New Report #3353057: Insecure Direct Object Reference (IDOR) allows creating folders.
🔺Severity: Low
👽 Reporter: bl4ck-
⭐️ Reputation: 907
🛠 State: resolved
💼 Team: SingleStore
💵 Bounty: null
🕐 Submitted: 2025-09-22
⏰ Disclosed: 2026-07-01 17:41:16
📝 Summary: An Insecure Direct Object Reference (IDOR) vulnerability was discovered in the backend API of a software product. The vulnerability allowed authenticated users with low privileges to create unauthorized folders and files in other users' workspaces within the same organization. The issue was reported, triaged, and resolved by the security team through the implementation of a patch to properly validate cluster ownership before allowing resource creation.
📂 Report JSON File: 3353057
@hackeronereports