The Open Web Application Security Project (OWASP) presented the final release for the 2017 OWASP Top 10. The categories have been selected based on the risk they pose, but what are the application Security Risks? The categories are injection, broken authentication, sensitive data exposure, broken access control, security misconfiguration, XSS, insecure deserialization, using components with known vulnerabilities, and insufficient logging and monitoring, this latter represents a serious problem for many organizations. It was found that the CSRF affected less than 5% of applications, meanwhile Unvalidated redirects and forwards has been found in around 8% of apps.”]
Source: http://securityaffairs.co/wordpress/65844/hacking/2017-owasp-top-10-final.html