Browse / GSA Bounty

GSA Bounty

See its reports on the map

What gets reported to GSA Bounty

• Misconfiguration8
• Authentication6
• Information Disclosure5
• Cross-site Scripting5
• Access Control5
• Open Redirect4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Wordpress Users Disclosure (/wp-json/wp/v2/users/) on data.govInformativeInformation Disclosure · medium
   14 votes
2. Email Spoofing - SPF record set to NeutralInformativeViolation of Secure Design Principles
   7 votes
3. Homo graphs attack InformativeViolation of Secure Design Principles
   6 votes
4. [api.data.gov] Leak Valid API With out Verification -InformativeImproper Authentication - Generic
   6 votes
5. federalist.18f.gov vulnerable to Sweet32 attackInformativeMan-in-the-Middle · medium
   3 votes
6. Email Spoofing - SPF record set to NeutralInformativeViolation of Secure Design Principles
   2 votes