OWASP top 10

Which of the category added newly in OWASP Top 10 2021?

• Broken Access Control

• Insecure Design

• Software and Data Integrity Failure

• Server-Side Request Forgery (SSRF)

What are the weaknesses included in Cryptographic Failures?

• Use of Hard-coded Password

• Broken or Risky Crypto Algorithm

• SQL Injection

• Insufficient Entropy

What are the weaknesses included in Software and Data Integrity Failures?

• Download of Code Without Integrity Check

• Insufficient Entropy

• Deserialization of Untrusted Data

• Broken or Risky Crypto Algorithm

Which category of OWASP Top 10 broadly cover SolarWinds malicious update-related issue?

• Identification and Authentication Failures

• Software and Data Integrity Failures

• Server-Side Request Forgery

• Security Logging and Monitoring Failures

How to prevent Injection vulnerability in a web application?

• Use Security Headers

• Use of safe API

• Use HTTPS/TLS protocol

• Input validation

What are the example attacks of Identification and Authentication Failures?

• CSRF

• Use of Credential Stuffing

• Exploiting third party component

• Retrieve credit card numbers by exploiting SQL Injection flaw

What are the weaknesses included in Security logging and monitoring?

• Omission of Security-relevant Information

• SQL Injection

• Insufficient Entropy

• Insertion of Sensitive Information into Log File

Which category includes XSS in OWASP Top 10 2021?

• Broken Access Control

• Insecure Design

• Software and Data Integrity Failure

• Injection

Which category includes Insecure Deserialization in OWASP Top 10 2021?

• Broken Access Control

• Insecure Design

• Software and Data Integrity Failure

• Injection

Reusing a Nonce, Key Pair in Encryption cover in which category of OWASP Top 10 2021?

• Broken Access Control

• Insecure Design

• Software and Data Integrity Failure

• Cryptographic Failure