Browse / Polymail, Inc.

Polymail, Inc.

See its reports on the map

What gets reported to Polymail, Inc.

• Cross-site Scripting2
• Server-Side Request Forgery1
• Insecure Direct Object Reference1
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. XSPA on API service endpointServer-Side Request Forgery (SSRF)
   43 votes
2. Metadata leakage via IDORInsecure Direct Object Reference (IDOR)
   19 votes
3. Reflected XSS by changing url parameters on the user invite onboarding links.Cross-site Scripting (XSS) - Reflected
   10 votes
4. Bug in OAuth Success Redirect URI ValidationImproper Input Validation
   6 votes
5. [share.polymail.io] XSS when uploading a file to the serverCross-site Scripting (XSS) - Generic
   5 votes