collaborators

1 paper

cs.CR2026

IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications

Yuewantong Song, Guanhang Shi, Yin Cai +5

Insecure Direct Object Reference (IDOR), often modeled as Broken Object-Level Authorization (BOLA), remains prevalent in Java database applications because identity and authorizati…