Which of the following is NOT among the OWASP Top 10

Solution

The OWASP Top 10 is a list of the most critical security risks for web applications, published by the Open Web Application Security Project (OWASP). It focuses exclusively on software vulnerabilities, such as:

• Injection attacks: Exploits flaws in input handling to execute unintended commands (e.g., SQL injection).
• Broken access control: Occurs when applications fail to enforce proper restrictions on user actions.
• IDOR: A type of access control issue where attackers manipulate references to objects (e.g., file paths) to access unauthorized data.
• Security misconfigurations: Includes improper settings in databases, servers, or frameworks that expose systems to attacks.

• Option A, B, C, and E: These are well-documented OWASP Top 10 vulnerabilities and remain significant threats in web application security.