Browse / Affirm

Affirm

See its reports on the map

What gets reported to Affirm

• Authentication1
• Insecure Direct Object Reference1
• Open Redirect1
• Business Logic1
• Access Control1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Absence of Token expiry leads to Unauthorized login AccessImproper Authentication - Generic · critical
   155 votes
2. IDOR to view order information of users and personal informationInsecure Direct Object Reference (IDOR) · medium
   $50087 votes
3. Open RedirectOpen Redirect · low
   $25074 votes
4. Subdomain takeover of www█████████.affirm.comBusiness Logic Errors · medium
   $50055 votes
5. Subdomain takeover due to non registered TLD [ ██████████.█████.██████.com ]Improper Access Control - Generic · low
   48 votes