getRoomRoles Method leaks Channel Owner

👉 https://hackerone.com/reports/1447440

🔹 Severity: Medium
🔹 Reported To: Rocket.Chat
🔹 Reported By: #gronke
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 4:03pm (UTC)

NoSQL-Injection discloses S3 File Upload URLs

👉 https://hackerone.com/reports/1458020

🔹 Severity: Medium
🔹 Reported To: Rocket.Chat
🔹 Reported By: #gronke
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 4:03pm (UTC)

API route chat.getThreadsList leaks private message content

👉 https://hackerone.com/reports/1446767

🔹 Severity: Medium
🔹 Reported To: Rocket.Chat
🔹 Reported By: #gronke
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 4:03pm (UTC)

Message ID Enumeration with Regular Expression in getReadReceipts Meteor method

👉 https://hackerone.com/reports/1377105

🔹 Severity: Medium
🔹 Reported To: Rocket.Chat
🔹 Reported By: #gronke
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 4:03pm (UTC)

Rocket.chat user info security issue

👉 https://hackerone.com/reports/1517377

🔹 Severity: Medium
🔹 Reported To: Rocket.Chat
🔹 Reported By: #mikolajczak
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 4:04pm (UTC)

getUsersOfRoom discloses users in private channels

👉 https://hackerone.com/reports/1410357

🔹 Severity: Medium
🔹 Reported To: Rocket.Chat
🔹 Reported By: #gronke
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 4:04pm (UTC)

Unauthenticated IP allowlist bypass when accessing job artifacts through gitlab pages at `{group_id}.gitlab.io`

👉 https://hackerone.com/reports/1591412

🔹 Severity: Medium | 💰 1,990 USD
🔹 Reported To: GitLab
🔹 Reported By: #joaxcar
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 9:31pm (UTC)

Content injection in Jira issue title enabling sending arbitrary POST request as victim

👉 https://hackerone.com/reports/1533976

🔹 Severity: High | 💰 8,690 USD
🔹 Reported To: GitLab
🔹 Reported By: #joaxcar
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 9:32pm (UTC)

Open Redirect on www.redditinc.com via `failed` query param

👉 https://hackerone.com/reports/1257753

🔹 Severity: Medium | 💰 500 USD
🔹 Reported To: Reddit
🔹 Reported By: #lu3ky-13
🔹 State: 🟢 Resolved
🔹 Disclosed: September 22, 2022, 11:27pm (UTC)

com.basecamp.bc3 Webview Javascript Injection and JS bridge takeover

👉 https://hackerone.com/reports/1343300

🔹 Severity: High | 💰 1,210 USD
🔹 Reported To: Basecamp
🔹 Reported By: #fr4via
🔹 State: 🟢 Resolved
🔹 Disclosed: September 23, 2022, 9:33am (UTC)

CVE-2022-38362: Apache Airflow Docker Provider <3.0 RCE vulnerability in example dag

👉 https://hackerone.com/reports/1671140

🔹 Severity: High | 💰 4,000 USD
🔹 Reported To: Internet Bug Bounty
🔹 Reported By: #happyhacking123
🔹 State: 🟢 Resolved
🔹 Disclosed: September 23, 2022, 5:16pm (UTC)

CVE-2022-35948: CRLF Injection in Nodejs ‘undici’ via Content-Type

👉 https://hackerone.com/reports/1664019

🔹 Severity: Medium | 💰 600 USD
🔹 Reported To: Internet Bug Bounty
🔹 Reported By: #happyhacking123
🔹 State: 🟢 Resolved
🔹 Disclosed: September 23, 2022, 5:38pm (UTC)

[CVE-2022-35949]: undici.request vulnerable to SSRF using absolute / protocol-relative URL on pathname

👉 https://hackerone.com/reports/1663788

🔹 Severity: Medium | 💰 1,200 USD
🔹 Reported To: Internet Bug Bounty
🔹 Reported By: #haxatron1
🔹 State: 🟢 Resolved
🔹 Disclosed: September 23, 2022, 5:51pm (UTC)

Reflected xss on videostore.mtnonline.com

👉 https://hackerone.com/reports/1646248

🔹 Severity: High
🔹 Reported To: MTN Group
🔹 Reported By: #possowski
🔹 State: 🟢 Resolved
🔹 Disclosed: September 25, 2022, 7:10pm (UTC)

Main Domain Takeover at https://www.marketo.net/

👉 https://hackerone.com/reports/1661914

🔹 Severity: Critical
🔹 Reported To: Adobe
🔹 Reported By: #gdattacker
🔹 State: 🟢 Resolved
🔹 Disclosed: September 26, 2022, 3:05pm (UTC)

XSS Reflected on reddit.com via url path

👉 https://hackerone.com/reports/1051373

🔹 Severity: High | 💰 5,000 USD
🔹 Reported To: Reddit
🔹 Reported By: #criptex
🔹 State: 🟢 Resolved
🔹 Disclosed: September 27, 2022, 4:04pm (UTC)

insecure gitlab repositories at ████████ [HtUS]

👉 https://hackerone.com/reports/1624152

🔹 Severity: High | 💰 500 USD
🔹 Reported To: U.S. Dept Of Defense
🔹 Reported By: #thpless
🔹 State: 🟢 Resolved
🔹 Disclosed: September 27, 2022, 6:18pm (UTC)

password field autocomplete enabled

👉 https://hackerone.com/reports/1023773

🔹 Severity: Medium
🔹 Reported To: Yelp
🔹 Reported By: #er_salil
🔹 State: ⚪️ Informative
🔹 Disclosed: September 27, 2022, 11:26pm (UTC)

CORS Misconfiguration on Yelp

👉 https://hackerone.com/reports/1707616

🔹 Severity: Medium
🔹 Reported To: Yelp
🔹 Reported By: #qualwin3001
🔹 State: ⚪️ Informative
🔹 Disclosed: September 28, 2022, 3:43am (UTC)

Directory Listing vulnerability on █.packet8.net/php/include/

👉 https://hackerone.com/reports/790846

🔹 Severity: Low
🔹 Reported To: 8x8
🔹 Reported By: #rajauzairabdullah
🔹 State: 🟢 Resolved
🔹 Disclosed: September 28, 2022, 4:41am (UTC)

Server-side request forgery (ssrf)

👉 https://hackerone.com/reports/1712240

🔹 Severity: Medium
🔹 Reported To: Yelp
🔹 Reported By: #raja404
🔹 State: 🔴 N/A
🔹 Disclosed: September 28, 2022, 7:54am (UTC)