API5:2023 Broken Function Level Authorization - OWASP API Security Top 10
The Ten Most Critical API Security Risks
owasp.org