JCC logo
OWASP Risks Atlasby Jer Catallo

Issue Details

Extraneous Functionality

mobile10 • Rank #10 in OWASP 2024

Explanation

Extraneous functionality includes debug interfaces, test accounts, hidden admin panels, and development endpoints left in production builds. These features often have weaker security controls and provide attackers with unintended access paths. They are frequently discovered through reverse engineering.

Remedy

Remove debug features, test endpoints, and hidden functionality from production builds. Use build configurations to exclude development-only code. Conduct thorough testing to identify and remove unintended functionality before release. Implement feature flags with proper access controls.

YearRankCategory
2016#10mobile10 - Extraneous Functionality
2024#10mobile10 - Privacy and Data Protection Failures