Security Quizzes OWASP TOP 10

Question:
For an an indirect reference, what happens if there’s no list of limited values authorized for a user in the direct reference?

Option A):
SQL Injection
Option B):
Access to sensitive data possible
Option C):
Brute Forcing of stored encrypted credentials
Option D):
XML Injection

Correct Answer is Option B):
Access to sensitive data possible