API1:2023 Broken Object Level Authorization - OWASP API Security Top 10
The Ten Most Critical API Security Risks
owasp.org