Broken object level authorization

Back to Full Glossary

An API flaw where a caller can access another object's data by changing an identifier.