Skip to main content

broken object level authorization

Definition

Refers to security flaws where users can access data they shouldn't, due to inadequate permission checks on individual (sub)objects.