Browse / SingleStore

SingleStore

See its reports on the map

What gets reported to SingleStore

• Business Logic4
• Access Control2
• Insecure Direct Object Reference2
• Authentication1
• Path Traversal1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. 2FA bypass possible on https://authsvc.singlestore.comAuthentication Bypass · medium
   96 votes
2. IDOR - Scheduled data leak to other accounts By "projectID"Business Logic Errors · medium
   77 votes
3. Exceed the maximum number of subscribers using Race Condition Business Logic Errors · low
   70 votes
4. Exceeding the limit of Workspaces via Race ConditionBusiness Logic Errors · medium
   62 votes
5. SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the serverMissing Authorization · high
   50 votes
6. Insecure Direct Object Reference (IDOR) allows creating folders.Insecure Direct Object Reference (IDOR) · low
   39 votes
7. Delete any folder for any user within the organizationInsecure Direct Object Reference (IDOR) · low
   35 votes
8. Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation processBusiness Logic Errors · low
   35 votes
9. Privilege Escalation – Access to the Alert Subscribers page for users with low privilegesPrivilege Escalation · low
   26 votes
10. Insufficient checks in the file path parameter allow writing to unauthorized directoriesExternal Control of File Name or Path · low
    12 votes