OWASP Top 10

OWASP Top 10 is a standard document by OWASP (Open Web Application Security Project) describing the 10 most critical web application security risks. Updated every 3-4 years.

OWASP Top 10 (2021)

1. A01: Broken Access Control — access control violations
2. A02: Cryptographic Failures — cryptographic errors
3. A03: Injection — injections (SQL, NoSQL, LDAP)
4. A04: Insecure Design — insecure design
5. A05: Security Misconfiguration — misconfiguration
6. A06: Vulnerable Components — vulnerable components
7. A07: Authentication Failures — authentication errors
8. A08: Software and Data Integrity Failures — integrity violations
9. A09: Security Logging Failures — insufficient logging
10. A10: SSRF — Server-Side Request Forgery