OWASP Top 10
Compare official OWASP Top 10 releases, inspect issue rankings over time, and explore security risk evolution.
Official OWASP listTop 10 issues ranked across every official OWASP release.
| Rank | Issue | Summary | Details |
|---|---|---|---|
| 01 |
| A1 Unvalidated Input covers Injection, Cross-Site Scripting (XSS), Input Validation. |
| Details |
| 02 | Broken Access Control | A2 Broken Access Control covers Broken Access Control, Insecure Direct Object Reference (IDOR). | Details |
| 03 | Unvalidated Input | A1 Unvalidated Input covers Injection, Cross-Site Scripting (XSS), Input Validation. | Details |
| 04 | Broken Access Control | A2 Broken Access Control covers Broken Access Control, Insecure Direct Object Reference (IDOR). | Details |
| 05 | Broken Access Control | A2 Broken Access Control covers Broken Access Control, Insecure Direct Object Reference (IDOR). | Details |
| 06 | Broken Authentication and Session Management | A3 Broken Authentication and Session Management covers Authentication Failures, Session Management. | Details |
| 07 | Broken Authentication and Session Management | A3 Broken Authentication and Session Management covers Authentication Failures, Session Management. | Details |
| 08 | Insecure Storage | A8 Insecure Storage covers Cryptographic Failures, Sensitive Data Exposure. | Details |
| 09 | Insecure Storage | A8 Insecure Storage covers Cryptographic Failures, Sensitive Data Exposure. | Details |
| 10 | Insecure Configuration Management | A10 Insecure Configuration Management covers Security Misconfiguration. | Details |
