OWASP API2 2023 Read Restricted (Edit)

Read operations (GET, HEAD) should be secured by at least one security scheme to prevent unauthorized access to sensitive data.

OWASPSecurityOperationsOpenAPI

Rule Definition

owasp-api2-2023-read-restricted-warn.yaml
{"owasp-api2-2023-read-restricted-warn":{"description":"Read operations (GET, HEAD) should be secured by at least one security scheme to prevent unauthorized access to sensitive data.","message":"This read operation is not protected by any security scheme.","given":"$.paths[*][get,head]","severity":"warn","then":{"field":"security","function":"truthy"}}}

Back to All of the Rules