ID: VUL-003 • Severity: Medium • Category: Access Control
An IDOR vulnerability was detected in the user profile endpoint. The application does not verify if the requesting user has permission to access the requested profile.
Critical risk - immediate remediation recommended
Medium severity vulnerabilities can pose moderate security risks
Access Control vulnerabilities are moderately exploitable
2% chance this is a false positive
10app.get('/api/profile/:userId', (req, res) => {
11 const userId = req.params.userId;
12 const profile = getProfileById(userId);
13 res.json(profile);
14});Our AI can analyze this vulnerability and suggest multiple approaches to fix it, tailored to your codebase and security requirements.