OWASPASVS 5.0 requirement

ASVS-V2.3.4 Business logic level locking mechanisms are used to ensure that limited quantity resources (such as theater seats or delivery slots) cannot…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V2 Validation and Business Logic
Section: V2.3 Business Logic Security
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that business logic level locking mechanisms are used to ensure that limited quantity resources (such as theater seats or delivery slots) cannot be double-booked by manipulating the application's logic.