Web Security Academy alignment with the OWASP Top 10 API vulnerabilities

Risk

Relevant Web Security Academy topics

Broken object level authorization

Access control vulnerabilities and privilege escalation

Broken authentication

Authentication vulnerabilities

OAuth 2.0 authentication vulnerabilities

JWT attacks

Broken object property level authorization

Mass assignment vulnerabilities

Unrestricted resource consumption

Race conditions

File upload vulnerabilities

Broken function level authorization

Access control vulnerabilities and privilege escalation

Unrestricted access to sensitive business flows

Business logic vulnerabilities

Server side request forgery

Server-side request forgery (SSRF)

Security misconfiguration

Cross-origin resource sharing (CORS)

Information disclosure vulnerabilities

HTTP Host header attacks

HTTP request smuggling

Improper inventory management

API testing

Unsafe consumption of APIs

API testing