{
  "generated": "2026-10-14T20:03:49.334Z",
  "vulnerabilities": [
    {
      "slug": "broken-access-control",
      "url": "https://www.infinity8labs.com/vulnerabilities/broken-access-control/",
      "title": "Broken access control & IDOR",
      "short": "IDOR",
      "aliases": [
        "Insecure direct object reference",
        "Broken object level authorization (BOLA)",
        "Missing function level access control"
      ],
      "summary": "The application checks who you are but not whether you're allowed to touch a specific record or function, so changing an ID or calling an endpoint directly exposes other users' data or admin actions.",
      "cwe": [
        "CWE-639",
        "CWE-285"
      ],
      "owasp": "A01:2021 Broken Access Control",
      "typical_severity": {
        "min": "medium",
        "max": "critical"
      },
      "updated": "2026-10-14",
      "references": [
        {
          "title": "CWE-639: Authorization Bypass Through User-Controlled Key",
          "url": "https://cwe.mitre.org/data/definitions/639.html"
        },
        {
          "title": "CWE-285: Improper Authorization",
          "url": "https://cwe.mitre.org/data/definitions/285.html"
        },
        {
          "title": "OWASP Top 10 A01:2021 Broken Access Control",
          "url": "https://owasp.org/Top10/A01_2021-Broken_Access_Control/"
        },
        {
          "title": "OWASP API Security Top 10 API1:2023 Broken Object Level Authorization",
          "url": "https://owasp.org/API-Security/editions/2023/en/0xa1-broken-object-level-authorization/"
        },
        {
          "title": "OWASP Authorization Cheat Sheet",
          "url": "https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html"
        },
        {
          "title": "OWASP Insecure Direct Object Reference Prevention Cheat Sheet",
          "url": "https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet.html"
        }
      ],
      "sections": [
        "https://www.infinity8labs.com/vulnerabilities/broken-access-control/#overview",
        "https://www.infinity8labs.com/vulnerabilities/broken-access-control/#impact",
        "https://www.infinity8labs.com/vulnerabilities/broken-access-control/#examples",
        "https://www.infinity8labs.com/vulnerabilities/broken-access-control/#remediation",
        "https://www.infinity8labs.com/vulnerabilities/broken-access-control/#testing",
        "https://www.infinity8labs.com/vulnerabilities/broken-access-control/#references"
      ],
      "related_advisories": []
    },
    {
      "slug": "cross-site-scripting",
      "url": "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/",
      "title": "Cross-site scripting (XSS)",
      "short": "XSS",
      "aliases": [
        "Reflected XSS",
        "Stored XSS",
        "DOM-based XSS"
      ],
      "summary": "Untrusted data is written into a web page without the right encoding, so an attacker's script runs in another user's browser with that user's session and permissions.",
      "cwe": [
        "CWE-79"
      ],
      "owasp": "A03:2021 Injection",
      "typical_severity": {
        "min": "medium",
        "max": "high"
      },
      "updated": "2026-10-14",
      "references": [
        {
          "title": "CWE-79: Improper Neutralization of Input During Web Page Generation",
          "url": "https://cwe.mitre.org/data/definitions/79.html"
        },
        {
          "title": "OWASP Cross Site Scripting Prevention Cheat Sheet",
          "url": "https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"
        },
        {
          "title": "OWASP DOM based XSS Prevention Cheat Sheet",
          "url": "https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html"
        },
        {
          "title": "OWASP Web Security Testing Guide: Testing for Cross Site Scripting",
          "url": "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/01-Testing_for_Reflected_Cross_Site_Scripting"
        },
        {
          "title": "MDN: Content Security Policy (CSP)",
          "url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP"
        },
        {
          "title": "MITRE ATT&CK T1189: Drive-by Compromise",
          "url": "https://attack.mitre.org/techniques/T1189/"
        }
      ],
      "sections": [
        "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/#overview",
        "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/#impact",
        "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/#examples",
        "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/#remediation",
        "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/#testing",
        "https://www.infinity8labs.com/vulnerabilities/cross-site-scripting/#references"
      ],
      "related_advisories": [
        "https://www.infinity8labs.com/advisories/I8L-2026-0001/"
      ]
    },
    {
      "slug": "sql-injection",
      "url": "https://www.infinity8labs.com/vulnerabilities/sql-injection/",
      "title": "SQL injection (SQLi)",
      "short": "SQLi",
      "aliases": [
        "Blind SQL injection",
        "Error-based SQL injection",
        "Second-order SQL injection"
      ],
      "summary": "User input is built into a database query as code instead of being passed as data, letting an attacker read, change or delete data and sometimes take over the database server.",
      "cwe": [
        "CWE-89"
      ],
      "owasp": "A03:2021 Injection",
      "typical_severity": {
        "min": "high",
        "max": "critical"
      },
      "updated": "2026-10-14",
      "references": [
        {
          "title": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command",
          "url": "https://cwe.mitre.org/data/definitions/89.html"
        },
        {
          "title": "OWASP SQL Injection Prevention Cheat Sheet",
          "url": "https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html"
        },
        {
          "title": "OWASP Query Parameterization Cheat Sheet",
          "url": "https://cheatsheetseries.owasp.org/cheatsheets/Query_Parameterization_Cheat_Sheet.html"
        },
        {
          "title": "OWASP Web Security Testing Guide: Testing for SQL Injection",
          "url": "https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05-Testing_for_SQL_Injection"
        },
        {
          "title": "MITRE ATT&CK T1190: Exploit Public-Facing Application",
          "url": "https://attack.mitre.org/techniques/T1190/"
        }
      ],
      "sections": [
        "https://www.infinity8labs.com/vulnerabilities/sql-injection/#overview",
        "https://www.infinity8labs.com/vulnerabilities/sql-injection/#impact",
        "https://www.infinity8labs.com/vulnerabilities/sql-injection/#examples",
        "https://www.infinity8labs.com/vulnerabilities/sql-injection/#remediation",
        "https://www.infinity8labs.com/vulnerabilities/sql-injection/#testing",
        "https://www.infinity8labs.com/vulnerabilities/sql-injection/#references"
      ],
      "related_advisories": []
    }
  ]
}