Browse / Doppler

Doppler

See its reports on the map

What gets reported to Doppler

• Access Control5
• Business Logic2
• Path Traversal1
• Cross-site Scripting1
• Other weaknesses1
• Misconfiguration1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Availability Impact from Exploiting Project Name VulnerabilitiesBusiness Logic Errors · low
   $25071 votes
2. Acquisition on broken link listed on the page "https://docs.doppler.com/docs/removal-deprecated-packages-scripts in [scheduling a call]Externally Controlled Reference to a Resource in Another Sphere · low
   49 votes
3. Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pagesCross-site Scripting (XSS) - Stored
   42 votes
4. WAF bypass and java script incomplete handling of Unicode characters might leads to dom-xssInformativeImproper Access Control - Generic
   36 votes
5. Github app(link) Takeover Listed on "https://docs.doppler.com/docs/github-actions" pagelow
   32 votes
6. No rate limit into email change leads to email notification boombing to its victim.Improper Access Control - Generic
   8 votes
7. email spoofing on doppler.teamViolation of Secure Design Principles
   7 votes
8. Owner can change themself for another Role Mode but application doesnot have this function.Privilege Escalation
   6 votes
9. Bypass Email Verification.Improper Access Control - Generic
   3 votes
10. User Access Control in Community PlanImproper Access Control - Generic
    3 votes
11. Access page must be reloaded to perform multiple requestsBusiness Logic Errors
    2 votes
12. Limited access to billing dashboard by Admin and Collaborator in conflict with user role permissions.Information Disclosure