Unverified60% confidenceFactExact time
In 2023, OWASP published the API Security Top 10, with Broken Object Level Authorization ranked first.
2
Sources
60%
Confidence
Long-term
Relevance
8/6/2026
First Seen
Sources
Web安全为何如此之难？开发者的困境与破局之道
Related Claims
Unverified越权访问测试（IDOR，Insecure Direct Object Reference）是OWASP Top 10中长期占据高位的漏洞类型，分为水平越权和垂直越权两种73% similarUnverifiedOWASP将注入攻击、加密失败、安全配置错误列为Web应用三大高危类别70% similarVerifiedThe OWASP Top 10 vulnerability list's 2021 version added Insecure Design as a new category.70% similarUnverifiedCVSS is maintained by the FIRST organization and provides a severity score of 0–10 for vulnerabilities; OWASP maintains the Top 10 vulnerability classification list.67% similarVerifiedOWASP已将Prompt注入列为LLM应用十大安全风险之首66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/697166API
curl https://kongchang.com/api/v1/knowledge/claims/697166MCP
get_claim(id=697166)