Unverified50% confidenceFactExact time
越权访问测试（IDOR，Insecure Direct Object Reference）是OWASP Top 10中长期占据高位的漏洞类型，分为水平越权和垂直越权两种
1
Sources
50%
Confidence
Long-term
Relevance
8/14/2026
First Seen
Sources
AI渗透测试实战：接入浏览器与Burp MCP配置指南
Related Claims
UnverifiedIn 2023, OWASP published the API Security Top 10, with Broken Object Level Authorization ranked first.73% similarVerifiedOWASP (Open Web Application Security Project) is the world's most influential open-source community for web application security, and its OWASP Top 10 is the industry-recognized classification standard for web security risks.64% similarVerifiedOWASP已将Prompt注入列为LLM应用十大安全风险之首64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/746571API
curl https://kongchang.com/api/v1/knowledge/claims/746571MCP
get_claim(id=746571)