API Design · Senior · Question 30 of 75

What does OWASP API9:2023 (Improper Inventory Management) refer to?

1Too many database indexes
2Wrong stock counts in e-commerce
✓Correct answer: Forgotten old versions, debug endpoints or undocumented hosts that stay exposed without current security controls

Explanation

Keep an inventory of every deployed API version and environment; retire old ones.

Further reading

OWASP API Security Top 10 (2023) ↗

Test yourself

Take the API Design · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.