Issue Details
Unsafe Consumption of APIs
api10-2023 • Rank #10 in OWASP 2023
Explanation
When applications trust third-party API responses without sufficient validation, upstream compromise or malformed data can cascade into downstream security incidents. Attackers abuse weak trust boundaries through manipulated payloads, dependency compromise, or protocol edge cases. This turns integration points into systemic risk multipliers.
Remedy
Treat third-party responses as untrusted input: validate schemas, apply strict contracts, and sanitize before use. Isolate integrations, enforce timeout and retry policies, and limit blast radius with circuit breakers and fallback strategies. Continuously monitor supplier security posture and dependency integrity.
| Year | Rank | Category |
|---|---|---|
| 2023 | #10 | api10-2023 - Unsafe Consumption of APIs |