Coda - HackerOne Reports
View on HackerOne3
Total Reports
0
Critical
1
High
2
Medium
0
Low
Unrestricted access to any "connected pack" on docs
Reported by:
0xcrypto
|
Disclosed:
Medium
Weakness: Improper Access Control - Generic
Use Github pack with Coda employee github account (search code of Coda's private repositories)
Reported by:
stefanovettorazzi
|
Disclosed:
Medium
Lack or Origin check leads to Cross-Site Websocket Hijacking (CSWSH)
Reported by:
fisher
|
Disclosed:
High
Weakness: Improper Access Control - Generic
Bounty: $800.00