UK EN RU
Home › Glossary › OWASP Top 10
Glossary

OWASP Top 10

OWASP (Open Web Application Security Project) is a non-profit organisation publishing web security standards. The OWASP Top 10 is an annual list of the most common vulnerabilities — the de facto standard for application security audits.

Top 10 (2021)

  1. Broken Access Control — accessing other users' data
  2. Cryptographic Failures — weak encryption, password leaks
  3. Injection — SQL, NoSQL, OS, LDAP injection
  4. Insecure Design — architectural-level flaws
  5. Security Misconfiguration — default passwords, open ports
  6. Vulnerable Components — outdated dependencies with known vulnerabilities
  7. Authentication Failures — weak authentication
  8. Software Integrity Failures — insecure CI/CD, unverified updates
  9. Logging Failures — no monitoring of attacks
  10. SSRF — Server-Side Request Forgery