Browse / Lichess

Lichess

See its reports on the map

What gets reported to Lichess

• Authentication2
• Path Traversal1
• Server-Side Request Forgery1
• Other weaknesses1
• Injection and Smuggling1
• Open Redirect1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Direct IP Access to WebsiteInformativecritical
   95 votes
2. Improper Authentication Throttling Allows Attacker-Controlled Account Lockouts InformativeImproper Restriction of Authentication Attempts · medium
   92 votes
3. Weak Rate Limiting Controls in the (LOGIN) page Expose System to Brute Force and DoS AttacksInformativeImproper Restriction of Authentication Attempts · critical
   74 votes