---
id: 2867
title: "The Rise of IDOR"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/rise-idor"
published_at: "2021-04-02T15:00:00Z"
tags: ["access-control", "web-security", "idor", "hackerone", "broken-access-control", "vulnerability-trends"]
phying_url: "https://phying.com/item/2867"
lang: en
---

# The Rise of IDOR

## Summary

IDOR lets attackers access other users' data via tweaked parameters, 200+ found monthly on HackerOne. The article covers IDOR types, Shopify and Parler cases, and why tools alone can't find them.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2021-04-02T15:00:00Z
- **Original:** https://www.hackerone.com/blog/rise-idor
- **Phying News:** https://phying.com/item/2867