Browse / Mavenlink

Mavenlink

See its reports on the map

What gets reported to Mavenlink

• Misconfiguration6
• Authentication3
• Insecure Direct Object Reference3
• Information Disclosure3
• Cross-Site Request Forgery3
• Access Control2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Password reset link injection allows redirect to malicious URLImproper Authentication - Generic · high
   62 votes
2. User uploaded portfolio files can be accessed by any user even after deletedInsecure Direct Object Reference (IDOR) · low
   43 votes
3. Uninitialized server memory disclosure via ImageMagick gif parserInformation Disclosure · high
   39 votes
4. Participation of expired account holders in Projects can occure financial loss to Mavenlink Insecure Direct Object Reference (IDOR) · low
   28 votes
5. [app.mavenlink.com] IDOR to view sensitive informationInsecure Direct Object Reference (IDOR) · medium
   26 votes
6. CSRF Add user templatesCross-Site Request Forgery (CSRF) · medium
   18 votes
7. Users email can be changed without verificationBusiness Logic Errors
   17 votes
8. Information disclosure when trying to delete an expense's attachment on m.mavenlink.com Information Disclosure · medium
   17 votes
9. Account members can re-add themselve after has been deleted by administratorPrivilege Escalation · low
   14 votes
10. Tabnabbing via Window.Opener @MavenlinkOpen Redirect · low
    9 votes
11. Password reset token not expiringImproper Authentication - Generic
    6 votes
12. Login password guessing attackViolation of Secure Design Principles
    6 votes
13. Non Validation of session after password resetViolation of Secure Design Principles
    5 votes
14. Email field filtering problem.Improper Authentication - Generic
    4 votes
15. Cookies are not cleared from Server side on LogoutDuplicateMisconfiguration
    4 votes
16. Flash XSS on swfupload.swf showing at app.mavenlink.comCross-site Scripting (XSS) - Generic
    4 votes
17. Login CSRFCross-Site Request Forgery (CSRF)
    4 votes
18. Clickjacking at https://www.mavenlink.com/ main website UI Redressing (Clickjacking)
    4 votes
19. XSS in https://app.mavenlink.com/workspaces/Cross-site Scripting (XSS) - Generic
    3 votes
20. privilege escalationPrivilege Escalation
    3 votes
21. The web application https://mavenlink.com discloses version details of the underlying Platform / ServerInformativeInformation Disclosure
    3 votes
22. Clickjacking & CSRF attack can be done at https://app.mavenlink.com/loginCross-Site Request Forgery (CSRF)
    3 votes
23. Open/Unvalidated Redirect IssueOpen Redirect
    2 votes
24. DNS load balancing not enabledInformativeViolation of Secure Design Principles
    2 votes
25. ClickjackingUI Redressing (Clickjacking)
    2 votes