← Back to Glossary

BOLA

Broken Object Level Authorization. An API vulnerability where endpoints expose object IDs without proper access control validation.

Learn More

📚 Web App Security Hub

Related Terms

SQL Injection XSS Stored XSS Reflected XSS DOM-Based XSS CSRF SSRF XXE IDOR RCE LFI RFI
Found this useful? Share it.
Keep going
Free coursesStructured, day-by-day tracks Free hacking labsPractice in your browser, no setup Attack SimulatorHands-on challenges in your browser
Make it count. Join free to earn XP for what you read and solve, keep a streak, and track your progress.
Join free