5 ms·Isn't OWASP top 10 based on impact and prevalence?by cthor 8y agoIsn't OWASP top 10 based on impact and prevalence?wglb 8y agoIn terms of ranking not in terms of seldctiontptacek 8y agoClearly not; SSRF isn’t in the top 10, but log misconfiguration is. The OWASP Top 10 is fashion, really, nothing much more.