Unverified50% confidenceFactExact time
越权访问测试（IDOR，Insecure Direct Object Reference）是OWASP Top 10中长期占据高位的漏洞类型，分为水平越权和垂直越权两种
1
Sources
50%
Confidence
Long-term
Relevance
8/14/2026
First Seen
Sources
Related Claims
Unverified2023年OWASP发布了API Security Top 10，其中Broken Object Level Authorization位列首位73% similarVerifiedOWASP（Open Web Application Security Project）是全球最具影响力的Web应用安全开源社区，其发布的OWASP Top 10是业界公认的Web安全风险分类标准64% similarVerifiedOWASP已将Prompt注入列为LLM应用十大安全风险之首64% similarUnverified如果主要目的是防盗追踪，OBD款因插拔方便反而是弱点；有隐蔽防盗需求的用户应选择有线硬接线款定位器。63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/746571API
curl https://kongchang.com/api/v1/knowledge/claims/746571MCP
get_claim(id=746571)