Vulnerabilities
Broken Object Level Authorization Prevention Checklist for APIs
Most API breaches occur because servers verify user identity but forget to verify object ownership, leaving data exposed to anyone with a predictable ID.
authorization
Everything Firewall Chronicle has reported about authorization: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Insecure Direct Object References: How Hidden IDs Leak Data
Insecure direct object references expose data when applications trust user-supplied identifiers without verifying ownership or access rights.