Issue Details
Unrestricted Resource Consumption
api04-2023 • Rank #4 in OWASP 2023
Explanation
Unrestricted resource consumption includes compute, memory, database throughput, and paid dependency usage without guardrails. Attackers trigger expensive operations repeatedly to cause outages or financial abuse. The threat includes both deliberate abuse and accidental misuse from clients lacking usage discipline.
Remedy
Apply quotas and budget controls at identity, tenant, and endpoint levels. Constrain expensive operations through async job queues, strict pagination, execution timeouts, and concurrency limits. Monitor cost and capacity telemetry continuously, and automate protections when thresholds are exceeded.
| Year | Rank | Category |
|---|---|---|
| 2023 | #4 | api04-2023 - Unrestricted Resource Consumption |