Browse / GSA Bounty

GSA Bounty

See its reports on the map

What gets reported to GSA Bounty

• Misconfiguration8
• Authentication6
• Information Disclosure5
• Cross-site Scripting5
• Access Control5
• Open Redirect4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Denial of service via cache poisoning on https://www.data.gov/DuplicateUncontrolled Resource Consumption · high
   12 votes
2. xmlrpc.php file enabled - data.govDuplicateImproper Access Control - Generic · medium
   10 votes
3. Content injection via URL parameter.DuplicateCode Injection
   9 votes
4. Information disclosure (system username, server info) in the x-amz-meta-s3cmd-attrs response header on data.govDuplicateInformation Disclosure · low
   5 votes
5. CSRF in generating a new Personal KeyDuplicateCross-Site Request Forgery (CSRF) · medium
   4 votes
6. Error Page Content Spoofing or Text InjectionDuplicateViolation of Secure Design Principles