OWASP Top 10: 1-Injection

Thexssrat
InfoSec Write-ups
Published in
6 min readApr 16, 2021

--

Introductions

When OWASP talks about injection flaws it’s refering to flaws that allow for anything ranging from low impact issues (HTML injection) to critical bugs (SQLi allowing for dropping of table). Basically anything in between can also be mentioned here like LDAP injection, OS command injection, … . These vulnerabilities all have one thing in common, their root cause. They all occur because developer pass unsanitised data from the user to an interpreter.

What is it?

--

--