Browse / Liberapay

Liberapay

See its reports on the map

What gets reported to Liberapay

• Information Disclosure8
• Authentication7
• Misconfiguration7
• Cross-Site Request Forgery6
• Business Logic6
• Access Control4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account LinkInformativeOpen Redirect
   77 votes
2. Unauthenticated team "income/payments" export ignores donor privacy settings (hide_giving, hide_from_lists) and uses frozen visibility, exposing donatImproper Authentication - Generic · medium
   $10068 votes
3. Liberapay member team twitter account broken Link Hijacking via Expired Twitter Account LinkOpen Redirect
   65 votes
4. Unsafe yaml load can lead to remote code executionDeserialization of Untrusted Data · low
   55 votes
5. Avatar URL is exposed in patron export for secret donationsPrivacy Violation · medium
   48 votes
6. Login CSRF : Login Authentication Flaw on https://liberapay.com/Phishing · low
   46 votes
7. Password Reset Token Leak Via ReferrerInformativeInformation Disclosure · medium
   42 votes
8. Exploiting JSONP callback on /username/charts.json endpoint leads to information disclosure despite user's privacy settingsInformation Disclosure · medium
   35 votes
9. Email Address Exposure via Gratipay Migration ToolInsecure Direct Object Reference (IDOR) · medium
   $10034 votes
10. Origin IP found, Cloudflare bypassedImproper Access Control - Generic · medium
    34 votes
11. Disavowed an email without any authenticationInformativeImproper Access Control - Generic · medium
    24 votes
12. Broken Authentication and session management OWASP A2N/AImproper Authentication - Generic
    24 votes
13. Import of repositories from GitHub is tied to username instead of immutable IDImproper Access Control - Generic · low
    22 votes
14. Unsafe deserialization in Libera Pay allows to escalate a SQL injection to Remote Command ExecutionDeserialization of Untrusted Data
    18 votes
15. Leaking Of Sensitive Information on GithubInformativeInformation Disclosure · low
    17 votes
16. Failure to Invalid Session after Password ChangeViolation of Secure Design Principles · low
    16 votes
17. Authenticated reflected XSS on liberapay.com via the back_to parameter when leaving a team.Cross-site Scripting (XSS) - Reflected · low
    16 votes
18. Private target account appears in search resultsPrivacy Violation
    14 votes
19. Full Path disclosure on 500 errorInformativeInformation Disclosure · low
    11 votes
20. Invalidate session after password resetViolation of Secure Design Principles · low
    10 votes
21. Reauthentication for changing password bypassImproper Authentication - Generic · low
    10 votes
22. User Enumeration InformativeInformation Disclosure · low
    9 votes
23. Improper Data Validation / Unvalidated InputN/AClassic Buffer Overflow
    8 votes
24. Liberapay Non Verified Account Takeover with signup featureInformativeImproper Authentication - Generic
    8 votes
25. csrf token did not changed after login/logout many timesInformativeCross-Site Request Forgery (CSRF)
    8 votes
26. Able to View other users income historyInformativeInsecure Direct Object Reference (IDOR)
    7 votes
27. Insecure Account DeletionInformativeImproper Authentication - Generic
    6 votes
28. Anyone can register organization legal type as "Soletrader"Resource Injection
    6 votes
29. Disavowing an account doesn't disable itInformativeImproper Authentication - Generic · low
    5 votes
30. Missing back-end user input validation can lead to DOS flawBusiness Logic Errors
    5 votes
31. CSRF to make any user accept the invitation to the teamInformativeCross-Site Request Forgery (CSRF)
    5 votes
32. twitter api access token leaked on github N/ACleartext Storage of Sensitive Information
    4 votes
33. Cross site scripting (content-sniffing)N/ACross-site Scripting (XSS) - DOM
    3 votes
34. CSRF token manipulation in every possible form submits. NO server side ValidationInformativeCross-Site Request Forgery (CSRF)
    3 votes
35. CSRF ON EDITING NAME (OPTIONAL)InformativeCross-Site Request Forgery (CSRF)
    3 votes
36. Same CSRF token is being used for deleting other platform login’s within an account and across other liberapay Account’sInformativeCross-Site Request Forgery (CSRF)
    3 votes
37. Unsecure changing passwordN/AImproper Authentication - Generic
    3 votes
38. Session Cookie without HttpOnly and secure flag setInformativeViolation of Secure Design Principles
    2 votes
39. Publicly editable GitHub wikisN/AImproper Access Control - Generic · high
    2 votes
40. A single user can subscribe a community multiple timesInformativeBusiness Logic Errors
    2 votes
41. REGISTRATION USING FAKE EMAIL ACCOUNTInformativeBusiness Logic Errors
    2 votes
42. No Data Validation, No Captcha, No Filters...InformativeBusiness Logic Errors
    1 votes
43. Buffer overflowN/AClassic Buffer Overflow
    1 votes
44. Punny code Detection Parsing should be implemented on Markdown InformativeBusiness Logic Errors
    1 votes
45. Returning back from the browser after logging off will disclose some informationN/ABusiness Logic Errors
    1 votes
46. Csrf token does not meet security designDuplicateCross-Site Request Forgery (CSRF)
    1 votes
47. The csrf token remains same after user logs inDuplicateViolation of Secure Design Principles
    1 votes
48. Phishing by Navigating Browser TabsInformativeViolation of Secure Design Principles
    1 votes
49. Current CSP Policy chained with HTML Injection can lead to Data ExfiltrationInformativeViolation of Secure Design Principles
    1 votes