Unrestricted Access to Sensitive Business Flows - 2023 OWASP Top 10 API Security Risks
Unrestricted Access to Sensitive Business Flows is a vulnerability that occurs when users can leverage information about the underlying business to abuse the API.
It's #6 on the list of the 2023 #OWASPTop10 security risks for APIs and in this short video Frank Kilcommins and José Haro Peralta, explain the vulnerability and how to mitigate through security-by-design.
0:00 What is the vulnerability
0:30 Example of the vulnerability
1:02 How to mitigate
#API6:2023