Logitech Program Statistics

View program

7 total issues disclosed

$800 total paid publicly

Most disclosed (2 disclosures) — Open Redirect

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
clickjacking on deleting user's clips [https://crossclip.com/clips] UI Redressing (Clickjacking) ibrahimatix0x01 Low 2021-11-05
Steal any users `access_token` via open redirect in https://streamlabs.com/global/identity?popup=1&r= None supplied sudi Medium 2021-11-04
session takeover via open protocol redirection on streamlabs.com Open Redirect f_m Medium 2021-09-01
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com] Privilege Escalation mrmax4o4 Low 2021-04-27
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs Cloudbot Server-Side Request Forgery (SSRF) nrockhouse Medium 2021-02-24
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id field Insecure Direct Object Reference (IDOR) bugra Low 2020-11-26
GET based Open redirect on [streamlabs.com/content-hub/streamlabs-obs/search?query=] Open Redirect raywando Low 2020-10-10