OWASPASVS 5.0 requirement

ASVS-V2.3.2 Business logic limits are implemented per the application's documentation to avoid business logic flaws being exploited.

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V2 Validation and Business Logic
Section
V2.3 Business Logic Security
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that business logic limits are implemented per the application's documentation to avoid business logic flaws being exploited.