Greenhouse.io Program Statistics

View program

13 total issues disclosed

$2,900 total paid publicly

Most disclosed (2 disclosures) — Denial of Service

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
SSH port on store.greenhouse.io is vulnerable to brute force attacks Improper Restriction of Authentication Attempts lonelyhuman Low 2020-06-22
Open S3 Bucket Accessible by any Aws User Improper Access Control - Generic kartarkat Low 2020-05-01
Subdomain Takeover on demo.greenhouse.io pointing to unbouncepages Phishing hacker2202 High 2020-03-05
Debug information disclosure on oauth-redirector.services.greenhouse.io Information Exposure Through Debug Information ajxchapman Medium 2020-02-29
Cache poisoning using NULL bytes and long URLs Improper Null Termination irvinlim Medium 2018-09-16
Bypass of request line length limit to DoS via cache poisoning Denial of Service irvinlim Medium 2018-09-16
DoS through cache poisoning using invalid HTTP parameters Denial of Service irvinlim Medium 2018-05-02
Content Spoofing on link.greenhouse.io Violation of Secure Design Principles ahmed_ezzat_nasr0x No rating 2017-07-27
Open Redirect in <customer>.greenhouse.io Open Redirect cyneox High 2017-07-08
[greenhouse.io] CRLF Injection / Insecure nginx configuration None supplied bobrov No rating 2016-11-02
Subdomain Takeover using blog.greenhouse.io pointing to Hubspot Cross-site Scripting (XSS) - Generic fransrosen No rating 2015-02-26
SMTP protection not used (please read carefully ) Improper Authentication - Generic ashesh No rating 2014-12-07
openssh-server Forced Command Handling Information Disclosure Vulnerability on blog.greenhouse.io Information Disclosure simon90 No rating 2014-10-10