OWASP Top 10
A list of the top ten web application security risks published by OWASP (Open Worldwide Application Security Project). It is an authoritative reference in the field of web security.
Core Facts
Timeline (last 90 days)
Payloads identified in the Transluce report include SQL injection (UNION SELECT), reflected XSS, path traversal (../../../../etc/passwd), command injection, and server-side template injection probing.
Broken Access Control tops the OWASP Top 10:2025 list.
Stored XSS has long held an important position in the OWASP Top 10 security risk list.
In 2023, OWASP published the API Security Top 10, with Broken Object Level Authorization ranked first.
All Facts (4)
In 2023, OWASP published the API Security Top 10, with Broken Object Level Authorization ranked first.
65%UnverifiedPayloads identified in the Transluce report include SQL injection (UNION SELECT), reflected XSS, path traversal (../../../../etc/passwd), command injection, and server-side template injection probing.
50%UnverifiedBroken Access Control tops the OWASP Top 10:2025 list.
50%UnverifiedStored XSS has long held an important position in the OWASP Top 10 security risk list.
50%