In the index.md A05:2021-Security Misconfiguration has this text:
[A05:2021-Security Misconfiguration](https://github.com/OWASP/Top10/blob/master/2021/docs/A05_2021-Security_Misconfiguration.md) moves up from https://github.com/OWASP/Top10/issues/6 in the previous edition; 90% of applications were tested for some form of misconfiguration, with an average incidence rate of4.5%, and over 208k occurrences of CWEs mapped to this risk category. With more shifts into highly configurable software, it's not surprising to see this category move up. The former category for A4:2017-XML External Entities (XXE) is now part of this risk category.
In A05_2021-Security_Misconfiguration.md it saids 4.%
## Overview
Moving up from #6 in the previous edition, 90% of applications were tested for some form of misconfiguration, with an average incidence rate of4.%,
Due to the dot, I think that the correct number is 4.5.
I Appreciate if this can be confirmed.
Hi
In the index.md A05:2021-Security Misconfiguration has this text:
[A05:2021-Security Misconfiguration](https://github.com/OWASP/Top10/blob/master/2021/docs/A05_2021-Security_Misconfiguration.md) moves up from https://github.com/OWASP/Top10/issues/6 in the previous edition; 90% of applications were tested for some form of misconfiguration, with an average incidence rate of
4.5%, and over 208k occurrences of CWEs mapped to this risk category. With more shifts into highly configurable software, it's not surprising to see this category move up. The former category for A4:2017-XML External Entities (XXE) is now part of this risk category.
In A05_2021-Security_Misconfiguration.md it saids 4.%
## Overview
Moving up from #6 in the previous edition, 90% of applications were tested for some form of misconfiguration, with an average incidence rate of
4.%,Due to the dot, I think that the correct number is 4.5. I Appreciate if this can be confirmed.
Thank you, Gerardo Canedo