MphRx Minerva IDOR Vulnerability in User Data Access
Vulnerability
An insecure direct object reference (IDOR) vulnerability exists in MphRx's Minerva version 3.6.0, specifically within the '/minerva/moUser/show/' endpoint. This vulnerability allows authenticated users to access the data of other registered users by simply modifying the user ID. Exploitation of this issue could enable an attacker to compile a list of users.
Impact
Successful exploitation allows an authenticated user to access and potentially misuse the data of other users.
Added: Apr 28, 2026, 1:24 PM
Updated: Apr 28, 2026, 1:24 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
0.0relevance
7.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.