API Testing · Senior · Question 13 of 75
What is BOLA, number one in the OWASP API Top 10 (2023)?
- 1Badly optimized list APIs that return too much data
- 2Broken offline login authentication in mobile clients
- 3Broken object level authorization: accessing others' objects by ID
Show the answer
Correct answer: Broken object level authorization: accessing others' objects by ID
Explanation
It's the most common API flaw. A test matrix of users × objects × operations is the systematic way to find it.