Browse / Aspen

Aspen

See its reports on the map

What gets reported to Aspen

• Misconfiguration3
• Authentication2
• Access Control2
• Information Disclosure2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Password reset token leak on third party website via Referer headerViolation of Secure Design Principles · medium
   39 votes
2. client_secret Token disclosure Improper Authentication - Generic
   13 votes
3. Cross-origin resource sharing (CORS)Improper Access Control - Generic
   12 votes
4. Email SpoofingSpamViolation of Secure Design Principles · low
   11 votes
5. No Rate Limit (Leads to huge email flooding/email bombing)N/AImproper Access Control - Generic · medium
   7 votes
6. Information leakage on django.aspen.ioN/AInformation Disclosure
   2 votes
7. aspen | clickjackingN/AUI Redressing (Clickjacking) · low
   2 votes
8. Session does't get expired after changing the password in https://readthedocs.orgInformativeImproper Authentication - Generic
9. Server Path Disclosure InformativeInformation Disclosure