OWASP-TOP-10-2021

Top 10 web risks security reference.

Definition

OWASP Top 10:2021: A01 Broken Access Control, A02 Cryptographic Failures, A03 Injection, A04 Insecure Design, A05 Security Misconfiguration, A06 Vulnerable Components, A07 Identification and Auth Failures, A08 Software Integrity Failures, A09 Logging Failures, A10 SSRF. New edition planned 2025.

Origin

Published 24 September 2021 by OWASP Foundation ; initial edition 2003.

Example in context

A supplier EDI portal audits each release vs Top 10:2021 — A01 priority because partner isolation is critical.

Related terms

• ISO 27001 — management framework.