Science · Cybersecurity

Consider the following statements regarding Insecure Direct Object Reference (IDOR): I. IDOR is a web application vulnerability that allows unauthorized access to internal objects by manipulating identifiers such as database keys or file paths. II. IDOR vulnerabilities occur when user authentication mechanisms, such as passwords or passkeys, are completely absent in a web application. III. Proper validation and authorization checks on user input can prevent IDOR vulnerabilities. IV. The Indian government fixed a major IDOR flaw in its income tax e-filing portal to prevent potential data leaks. Which of the statements given above are correct?