Foundation glossary/AppSec
OWASP Top 10
Companion card for the Foundation course — study the related lesson for full progress.
Simple explanation
Common web app risk list developers must know — current edition is Top 10:2025.
Technical explanation
Consensus critical web risks; 2025 reorders categories (injection=A05, supply chain=A03, SSRF under A01). Keep 2021 codes as historical only.
Real-life scenario
Why your college portal must not show another student’s fees if you change an ID in the URL.
Security relevance
Shared language for AppSec priorities in web and APIs — use Top 10:2025 as current.
Practical example
A01:2025 Broken Access Control, A05:2025 Injection…
A01 Access control
A05 Injection
A03 Supply chain
…
Mini quiz
Changing a student ID in a URL to see another fee bill is closest to:
Related lesson
No direct lesson slug yet — use the Foundation course syllabus or roadmap level web-security.