A03:2021 – Injection

GPTKB entity

Statements (23)
Predicate Object
gptkbp:instanceOf OWASP Top 10 Category
gptkbp:describes Vulnerabilities where untrusted data is sent to an interpreter as part of a command or query
https://www.w3.org/2000/01/rdf-schema#label A03:2021 – Injection
gptkbp:impact Data loss
Data corruption
Account compromise
Denial of access
gptkbp:includes gptkb:SQL_Injection
OS Command Injection
LDAP Injection
NoSQL Injection
XPath Injection
gptkbp:partOf OWASP Top 10:2021
gptkbp:prevention Input validation
Escaping user input
Use of parameterized queries
Use of ORM frameworks
gptkbp:publishedIn 2021
gptkbp:rankIn2021 3
gptkbp:replacedBy A01:2017 – Injection
gptkbp:riskFactor High
gptkbp:bfsParent gptkb:OWASP_Top_10
gptkbp:bfsLayer 6