From the course: The OWASP API 2023 Top 10: An Overview

Unlock the full course today

Join today to access over 24,100 courses taught by industry experts.

API9:2023 Improper Inventory Management

API9:2023 Improper Inventory Management

From the course: The OWASP API 2023 Top 10: An Overview

Start my 1-month free trial Buy for my team

API9:2023 Improper Inventory Management

“

- [Instructor] The ninth O OSP API Vulnerability is improper inventory management. O OSP explains its vulnerability as APIs tend to expose more endpoints than traditional web applications, making proper and updated documentation highly important. A proper inventory of hosts and deployed API versions are also important to mitigate issues such as deprecated API versions, and exposed debug endpoints. Improper inventory management occurs when applications fail to effectively keep track of its resources, assets, or data objects exposed through different versions of an API. This mainly happens due to the lack of proper access controls, authentication, or authorization mechanisms in older API endpoints. Unauthorized access and data exposure pose security risks, especially when dealing with non-production builds or deprecated API versions. When you were younger, did you ever have a toy or a video game that you loved, but when a…

Contents