Browse / Lichess

Lichess

See its reports on the map

What gets reported to Lichess

• Authentication2
• Path Traversal1
• Server-Side Request Forgery1
• Other weaknesses1
• Injection and Smuggling1
• Open Redirect1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Path Traversal Vulnerability in Lila ProjectPath Traversal: '.../...//' · high
   117 votes
2. Server-Side Request Forgery (SSRF) via Game Export APIServer-Side Request Forgery (SSRF) · critical
   116 votes
3. Direct IP Access to WebsiteInformativecritical
   95 votes
4. Improper Authentication Throttling Allows Attacker-Controlled Account Lockouts InformativeImproper Restriction of Authentication Attempts · medium
   92 votes
5. Weak Rate Limiting Controls in the (LOGIN) page Expose System to Brute Force and DoS AttacksInformativeImproper Restriction of Authentication Attempts · critical
   74 votes
6. ImageId Format Injection in Image Upload EndpointImproper Input Validation · medium
   73 votes
7. Open Redirect Vulnerability in OAuth Flow Leading to Potential Phishing AttackDuplicateOpen Redirect · low
   70 votes
8. CSRF at Network featureCross-Site Request Forgery (CSRF) · medium
   59 votes
9. Unauthorized Blogs CreationImproper Access Control - Generic · low
   50 votes