What does the owasp top 10 list name the classification for this vulnerability hackthebox