Content

1 Summary
2 A01:2021 – Broken Access Control
3 A02:2021 – Cryptographic Failures
4 A03:2021 – Injection
5 A04:2021 – Insecure Design
6 A05:2021 – Security Misconfiguration
7 A06:2021 – Vulnerable and Outdated Components
8 A07:2021 – Identification and Authentication Failures
9 A08:2021 – Software and Data Integrity Failures
10 A09:2021 – Security Logging and Monitoring Failures
11 A10:2021 – Server-Side Request Forgery (SSRF)

Summary

The Open Web Application Security Project (OWASP) is an open community dedicated to enabling organizations to develop, purchase, and maintain applications and APIs that can be trusted.

The OWASP Top 10 is primarily an awareness document of the most relevant vulnerabilities of web applications. However, this has not stopped organizations from using it as a de facto industry AppSec standard since its inception in 2003.