Background: Open Web Application Security Project (OWASP)
Content
- 1 Summary
- 2 A01:2021 – Broken Access Control
- 3 A02:2021 – Cryptographic Failures
- 4 A03:2021 – Injection
- 5 A04:2021 – Insecure Design
- 6 A05:2021 – Security Misconfiguration
- 7 A06:2021 – Vulnerable and Outdated Components
- 8 A07:2021 – Identification and Authentication Failures
- 9 A08:2021 – Software and Data Integrity Failures
- 10 A09:2021 – Security Logging and Monitoring Failures
- 11 A10:2021 – Server-Side Request Forgery (SSRF)
Summary
The Open Web Application Security Project (OWASP) is an open community dedicated to enabling organizations to develop, purchase, and maintain applications and APIs that can be trusted.
The OWASP Top 10 is primarily an awareness document of the most relevant vulnerabilities of web applications. However, this has not stopped organizations from using it as a de facto industry AppSec standard since its inception in 2003.
A01:2021 – Broken Access Control
A02:2021 – Cryptographic Failures
A03:2021 – Injection
A04:2021 – Insecure Design
A05:2021 – Security Misconfiguration
A06:2021 – Vulnerable and Outdated Components
A07:2021 – Identification and Authentication Failures
A08:2021 – Software and Data Integrity Failures
A09:2021 – Security Logging and Monitoring Failures
A10:2021 – Server-Side Request Forgery (SSRF)