Stash OWASP Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.

1. C10:2018-Handle all Errors and Exceptions
2. A6:2013-Sensitive Data Exposure
3. A3:2017-Sensitive Data Exposure
4. A8:2017-Insecure Deserialization
5. C2:2018-Leverage Security Frameworks and Libraries
6. C1:2018-Define Security Requirements
7. A10:2013-Unvalidated Redirects and Forwards
8. C6:2018-Implement Digital Identity
9. A4:2013-Insecure Direct Object References
10. A3:2013-Cross-Site Scripting (XSS)
11. A1:2017-Injection
12. C5:2018-Validate All Inputs
13. A9:2013-Using Components with Known Vulnerabilities
14. C7:2018-Enforce Access Controls
15. C9:2018-Implement Security Logging and Monitoring
16. A9:2017-Using Components with Known Vulnerabilities
17. A4:2017-XML External Entities (XXE)
18. A2:2013-Broken Authentication and Session Management
19. A2:2017-Broken Authentication
20. C8:2018-Protect Data Everywhere
21. A5:2017-Broken Access Control
22. C3:2018-Secure Database Access
23. A8:2013-Cross-Site Request Forgery (CSRF)
24. A1:2013-Injection
25. C4:2018-Encode and Escape Data
26. A6:2017-Security Misconfiguration
27. A10:2017-Insufficient Logging & Monitoring
28. A5:2013-Security Misconfiguration
29. A7:2017-Cross-Site Scripting (XSS)
30. A7:2013-Missing Function Level Access Control