OWASP Top 10 — 2021

OWASP. (2021). OWASP Top 10 — 2021: A01 Broken Access Control.

Type

Standard

Intellectual base

Reference work

Year

2021

Link

https://owasp.org/Top10/

Cited from

computer_science

Cited by

2 citations across 2 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Access Control
  • Loose policies speed work but expand blast radius

    This sourceRanks Broken Access Control #1 (94% of tested apps affected); enumerates least-privilege/deny-by-default violations, IDOR, missing function-level checks, and horizontal/vertical privilege escalation — supports markers 012 (least-privilege failures expand exposure) and 013 (A01 + the listed failure modes).

• Indirection
  • The layer itself can become a target or a bottleneck for attacks

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Links previously used in the corpus

Before the registry existed this work was also linked 1 other way.

• https://owasp.org/Top10/2021/A01_2021-Broken_Access_Control/ ×1

Registry ID ref:974af4cdd662 · see in the full table