OWASP API2 2023 Write Restricted (Edit)

All write operations (POST, PUT, PATCH, DELETE) must be secured by at least one security scheme to prevent unauthorized modifications.

OWASPSecurityOperationsOpenAPI

Rule Definition

owasp-api2-2023-write-restricted-error.yaml 
{"owasp-api2-2023-write-restricted-error":{"description":"All write operations (POST, PUT, PATCH, DELETE) must be secured by at least one security scheme to prevent unauthorized modifications.","message":"This write operation is not protected by any security scheme.","given":"$.paths[*][post,put,patch,delete]","severity":"error","then":{"field":"security","function":"truthy"}}}

Back to All of the Rules