api: "YAML JSON TOON Database" version: 1.0.0 format: json dataset: slug: common-vulnerabilities-owasp title: "OWASP Top 10 Vulnerabilities" description: "The OWASP Top 10 web application security risks." category: Cybersecurity category_slug: cybersecurity tags: "security,owasp,vulnerabilities" view_count: 0 data [10]{rank,name,description}: A01,"Broken Access Control","Restrictions on authenticated users are not properly enforced." A02,"Cryptographic Failures","Failures related to cryptography that expose sensitive data." A03,Injection,"Untrusted data is sent to an interpreter as part of a command or query." A04,"Insecure Design","Missing or ineffective security design controls." A05,"Security Misconfiguration","Insecure default configurations or incomplete ad-hoc configurations." A06,"Vulnerable and Outdated Components","Using components with known vulnerabilities." A07,"Identification and Authentication Failures","Weaknesses in identity and session management." A08,"Software and Data Integrity Failures","Assuming untrusted updates and data are valid." A09,"Security Logging and Monitoring Failures","Insufficient logging and monitoring to detect and respond to attacks." A10,"Server-Side Request Forgery","Forcing the server to make requests to unintended locations."