OWASPASVS 5.0 requirement

ASVS-V2.3.1 The application will only process business logic flows for the same user in the expected sequential step order and without skipping steps.

L1 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V2 Validation and Business Logic
Section
V2.3 Business Logic Security
Level
L1 (requirement applies from this verification level up)

Requirement

Verify that the application will only process business logic flows for the same user in the expected sequential step order and without skipping steps.