Browse / Dust

Dust

See its reports on the map

What gets reported to Dust

• Access Control6
• Business Logic2
• Cross-site Scripting1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Stored XSS in File Upload Leads to Privilege Escalation and Full Workspace TakeoverCross-site Scripting (XSS) - Stored · high
   118 votes
2. Privilege Persistence via Cloned AgentImproper Access Control - Generic · medium
   91 votes
3. Privilege Escalation in Edit and Create Secret Endpoints Leads to Unauthorized Secret ModificationImproper Access Control - Generic · high
   86 votes
4. BAC – Bypass chatbot restrictions via unauthorized mention injectionImproper Access Control - Generic · medium
   65 votes
5. Race Condition in Folder Creation Allows Bypassing Folder LimitBusiness Logic Errors · medium
   65 votes
6. UI flaw allows unauthorized users to add documents to restricted foldersImproper Access Control - Generic · medium
   57 votes
7. Improper Session Invalidation – Auto Sign-In Without Credentials After Logout (Affects Chrome & Firefox)Insufficient Session Expiration · medium
   56 votes
8. Unauthorized Table Creation by MemberImproper Access Control - Generic · medium
   52 votes
9. User Limit Bypass via Pending Invitations in Workspace SystemBusiness Logic Errors · medium
   51 votes