From the course: The OWASP API 2023 Top 10: An Overview

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

API10:2023 Unsafe Consumption of APIs

API10:2023 Unsafe Consumption of APIs

From the course: The OWASP API 2023 Top 10: An Overview

Start my 1-month free trial Buy for my team

API10:2023 Unsafe Consumption of APIs

“

- The 10th and final vulnerability in the 2023 API Security Top 10 is unsafe consumption of APIs. OWASP explains this vulnerability as, "Developers tend to trust data received from third-party APIs more than user input, and so tend to adopt weaker security standards. In order to compromise APIs, attackers go after integrated third-party services instead of trying to compromise the target API directly." Unsafe consumption of APIs occur when an application interacts with an external or third-party API in an insecure manner, sometimes disregarding its own security best practices and trusting the security of the external API. This misplaced trust can lead to major security risks, such as unauthorized access, data exposure, and even potential compromise of the application's functionality and integrity. If an attacker can identify and potentially compromise the API or service the target is integrated with, they may be able to…

Contents