Browse / Krisp

Krisp

See its reports on the map

What gets reported to Krisp

• Code Execution2
• Authentication2
• Access Control2
• Information Disclosure2
• Injection and Smuggling1
• Business Logic1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.aiDeserialization of Untrusted Data · critical
   119 votes
2. Authentication bypass for ███ leads to take over any users account.Missing Authentication for Critical Function · critical
   48 votes
3. Authentication CSRF resulting in unauthorized account access on Krisp appImproper Authentication - Generic · high
   35 votes
4. Add more seats by paying less via PUT /v2/seats request manipulationImproper Input Validation · medium
   30 votes
5. [api.krisp.ai] Race condition on /v2/seats endpoint allows bypassing the original seat limitTime-of-check Time-of-use (TOCTOU) Race Condition · low
   26 votes
6. Card requirement bypass for business trialImproper Access Control - Generic · low
   22 votes
7. Log4j CVE-2021–44228InformativeCode Injection
   21 votes
8. Visibility Robots.txt fileDuplicateInformation Disclosure
   19 votes
9. Force User to Accept Attacker's invite [ Restrict user to create account]Privilege Escalation · low
   10 votes
10. Error Page Content Spoofing or Text InjectionInformativeViolation of Secure Design Principles
    8 votes
11. Unsubscripe linkes leakedDuplicateInformation Disclosure
    3 votes