OWASP's report on the top 10 web application security risks is widely used by global enterprises. However, Kaspersky's research, which analyzed thousands of web applications from 2021 to 2023 using various assessment methods, found significant differences. The top threats identified include broken access control, data leaks, SSRF, and SQL injection, among others. Organizations are advised to adopt flexible security measures based on impact and exploitability.
Table of contents
Top 10 Web Application Security Threats1. Broken Access ControlSecurity Recommendations2. Data LeaksSecurity Recommendations3. Server-Side Request Forgery (SSRF)Security Recommendations4. SQL InjectionSecurity Recommendations5. Cross-Site Scripting (XSS)Security Recommendations6. Broken AuthenticationSecurity Recommendations7. Security MisconfigurationSecurity Recommendations8. Insufficient Brute Force ProtectionSecurity Recommendations9. Weak User PasswordsSecurity Recommendations10. Unpatched Known VulnerabilitiesSecurity Recommendations96 Impressions