OWASP Top 10 (2021 edition):

A01: Broken Access Control — users can act outside their intended permissions
A02: Cryptographic Failures — sensitive data exposed due to weak/missing encryption
A03: Injection — SQL, NoSQL, OS, LDAP injection attacks
A04: Insecure Design — fundamental design flaws
A05: Security Misconfiguration — default/incomplete configurations
A06: Vulnerable Components — using libraries with known vulnerabilities
A07: Authentication Failures — broken auth, session management
A08: Software Integrity Failures — unsigned updates, compromised CI/CD
A09: Logging Failures — insufficient monitoring and alerting
A10: SSRF — Server-Side Request Forgery

OWASP Top 10 (2021 edition):

A01: Broken Access Control — users can act outside their intended permissions
A02: Cryptographic Failures — sensitive data exposed due to weak/missing encryption
A03: Injection — SQL, NoSQL, OS, LDAP injection attacks
A04: Insecure Design — fundamental design flaws
A05: Security Misconfiguration — default/incomplete configurations
A06: Vulnerable Components — using libraries with known vulnerabilities
A07: Authentication Failures — broken auth, session management
A08: Software Integrity Failures — unsigned updates, compromised CI/CD
A09: Logging Failures — insufficient monitoring and alerting
A10: SSRF — Server-Side Request Forgery

关于此模块

关于 Web Security Intro