Authorization Weaknesses
High · Access Control · OWASP A01:2021 · CWE-285
Description
Users perform actions beyond their role.
Root cause
Client-side or inconsistent permission checks.
Impact
Privilege escalation.
Detection
Role-based test matrices.
Mitigation
Centralized, deny-by-default authorization.
Secure coding
Implement RBAC/ABAC server-side.
Safe lab example
Juice Shop admin section challenge
Practise related skills in Labs or deepen on Academy library.