4.5 Authorization
4.5.1 Directory Traversal File Include
4.5.2 Bypassing Authorization Schema
4.5.3 Privilege Escalation
4.5.4 Insecure Direct Object References
4.5.5 OAuth Weaknesses
4.5.5.1 OAuth Authorization Server Weaknesses
4.5.5.2 OAuth Client Weaknesses