OWASP / Top10

Official OWASP Top 10 Document Repository
Other
4.21k stars 822 forks source link

A05:2021-Security Misconfiguration: Average incidence percentage mismatches from index.md to A05_2021-Security_Misconfiguration.md #697

Open gerardocanedo opened 2 years ago

gerardocanedo commented 2 years ago

Hi

In the index.md A05:2021-Security Misconfiguration has this text:

[A05:2021-Security Misconfiguration](https://github.com/OWASP/Top10/blob/master/2021/docs/A05_2021-Security_Misconfiguration.md) moves up from https://github.com/OWASP/Top10/issues/6 in the previous edition; 90% of applications were tested for some form of misconfiguration, with an average incidence rate of4.5%, and over 208k occurrences of CWEs mapped to this risk category. With more shifts into highly configurable software, it's not surprising to see this category move up. The former category for A4:2017-XML External Entities (XXE) is now part of this risk category.

In A05_2021-Security_Misconfiguration.md it saids 4.%

## Overview

Moving up from #6 in the previous edition, 90% of applications were tested for some form of misconfiguration, with an average incidence rate of 4.%,

Due to the dot, I think that the correct number is 4.5. I Appreciate if this can be confirmed.

Thank you, Gerardo Canedo