20.1.1 Open Web Application Security Project
572
20.1.3 Broken Authentication
574
20.1.4 Sensitive Data Exposure
574
20.1.5 XML External Entities
575
20.1.6 Broken Access Control
575
20.1.7 Security Misconfiguration
576
20.1.8 Cross-Site Scripting
577
20.1.9 Insecure Deserialization
577
20.1.10 Using Components with Known Vulnerabilities
578
20.1.11 Insufficient Logging and Monitoring
579