Browse / Yelp

Yelp

See its reports on the map

What gets reported to Yelp

• Misconfiguration22
• Information Disclosure17
• Access Control7
• Authentication6
• Cross-Site Request Forgery4
• Cross-site Scripting3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Multiple Vulnerabilities in (*.blog.yelp.com) - Leakage user admin Sensitive ExposureInformativeBusiness Logic Errors
   23 votes
2. CORS Misconfiguration on YelpInformativeMisconfiguration · medium
   19 votes
3. DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389InformativeUncontrolled Resource Consumption · medium
   15 votes
4. No rate limit on subscribe form InformativeBusiness Logic Errors · medium
   13 votes
5. PURGE is not authenticatedInformativeImproper Authentication - Generic · low
   12 votes
6. Public Github Repo Leaking Internal Credentials InformativeInformation Disclosure · critical
   10 votes
7. Self-XSS via location cookie city field when getting suggestions for a new locationInformativeCross-site Scripting (XSS) - Generic
   8 votes
8. installed.json sensitive file was publicly accessible on your web application which discloses information about authors and admins InformativeInformation Disclosure · low
   6 votes
9. Ngnix Server version disclosure 404 Page!InformativeInformation Disclosure
   5 votes
10. password field autocomplete enabledInformativeInsecure Storage of Sensitive Information · medium
    4 votes
11. IDOR in locid parameter allowing to view others accounts Profile Locations InformativeBusiness Logic Errors · low
    4 votes
12. Nginx server version disclosure on engineeringblogInformativeInformation Disclosure
    4 votes
13. JDBC credentials leaked via githubInformativeInformation Disclosure
    3 votes
14. Content spoofing on yelp.oneloginInformativeOpen Redirect · low
    3 votes
15. Weak Password PolicyInformativeViolation of Secure Design Principles · low
    2 votes
16. Yelp.com is vulnerable to SWEET32 attackInformativeCryptographic Issues - Generic
    2 votes
17. Clickjacking: X-Frame Header MissingInformativeUI Redressing (Clickjacking)
    2 votes
18. Nginx version disclosure via forbidden pageInformativeInformation Disclosure · low
    1 votes
19. User can be fooled to Bookmark any restaurant by clickjackingInformativeUI Redressing (Clickjacking) · low
20. ClickJacking in editing business nameInformativeUI Redressing (Clickjacking) · low
21. One of yelp.com url is redirecting to domain which is not yet purchasedInformativeOpen Redirect
22. Clickjacking @ Main Domain[www.yelp.com]InformativeUI Redressing (Clickjacking) · low
23. [Yelp Blog] Backslash in search string causes JS errorInformativeViolation of Secure Design Principles
24. Possible content spoofing due to missing error pageInformativeViolation of Secure Design Principles · low
25. Error Page Text InjectionInformativeViolation of Secure Design Principles