OWASP Top 10
Compare official OWASP Top 10 releases, inspect issue rankings over time, and explore security risk evolution.
Official OWASP list| Rank | Category | Summary | Details |
|---|---|---|---|
| 01 |
| A01 Broken Access Control covers Broken Access Control, Insecure Direct Object Reference (IDOR). |
| Details |
| 02 | Security Misconfiguration | A02 Security Misconfiguration covers Security Misconfiguration. | Details |
| 03 | Software Supply Chain Failures | A03 Software Supply Chain Failures covers Software Supply Chain Failures, Vulnerable and Outdated Components. | Details |
| 04 | Cryptographic Failures | A04 Cryptographic Failures covers Cryptographic Failures, Sensitive Data Exposure, Transport Layer Protection. | Details |
| 05 | Injection | A05 Injection covers Injection, Cross-Site Scripting (XSS), Input Validation. | Details |
| 06 | Insecure Design | A06 Insecure Design covers Insecure Design. | Details |
| 07 | Authentication Failures | A07 Authentication Failures covers Authentication Failures, Session Management. | Details |
| 08 | Software or Data Integrity Failures | A08 Software or Data Integrity Failures covers Software and Data Integrity Failures. | Details |
| 09 | Security Logging and Alerting Failures | A09 Security Logging and Alerting Failures covers Logging and Monitoring Failures. | Details |
| 10 | Mishandling of Exceptional Conditions | A10 Mishandling of Exceptional Conditions covers Improper Error Handling, Availability and Resilience. | Details |
