API10:2023 — Unsafe Consumption of APIs
Verified by Precogs Threat Research
What is Unsafe API Consumption?
Developers trusting data received from third-party APIs without validation. When integrating external APIs, developers often apply weaker security standards to received data than to user input, creating injection and SSRF vectors.
Impact
Supply chain risk at the API level. Compromised or malicious third-party APIs can inject malicious data that is trusted and processed without validation.
How Precogs AI Addresses API10
Precogs AI identifies API integration points where third-party data is processed without validation, detecting injection risks in compiled API consumers.