Insecure direct object references (IDOR) are a type of access control flaw that arises when an application uses user-supplied input to access objects directly. It allows attackers to bypass authorization and access resources directly by modifying the value of a parameter used to directly point to an object.
Reference Link - https://owasp.org/www-project-web-sec...