Statements (23)
Predicate | Object |
---|---|
gptkbp:instanceOf |
OWASP Top 10 Category
|
gptkbp:describes |
Vulnerabilities where untrusted data is sent to an interpreter as part of a command or query
|
https://www.w3.org/2000/01/rdf-schema#label |
A03:2021 – Injection
|
gptkbp:impact |
Data loss
Data corruption Account compromise Denial of access |
gptkbp:includes |
gptkb:SQL_Injection
OS Command Injection LDAP Injection NoSQL Injection XPath Injection |
gptkbp:partOf |
OWASP Top 10:2021
|
gptkbp:prevention |
Input validation
Escaping user input Use of parameterized queries Use of ORM frameworks |
gptkbp:publishedIn |
2021
|
gptkbp:rankIn2021 |
3
|
gptkbp:replacedBy |
A01:2017 – Injection
|
gptkbp:riskFactor |
High
|
gptkbp:bfsParent |
gptkb:OWASP_Top_10
|
gptkbp:bfsLayer |
6
|