Browse / Lichess

Lichess

See its reports on the map

What gets reported to Lichess

• Authentication2
• Path Traversal1
• Server-Side Request Forgery1
• Other weaknesses1
• Injection and Smuggling1
• Open Redirect1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Path Traversal Vulnerability in Lila ProjectPath Traversal: '.../...//' · high
   117 votes
2. Server-Side Request Forgery (SSRF) via Game Export APIServer-Side Request Forgery (SSRF) · critical
   116 votes
3. ImageId Format Injection in Image Upload EndpointImproper Input Validation · medium
   73 votes
4. CSRF at Network featureCross-Site Request Forgery (CSRF) · medium
   59 votes
5. Unauthorized Blogs CreationImproper Access Control - Generic · low
   50 votes