OpenMage Program Statistics

View program

5 total issues disclosed

$0 total paid publicly

Most disclosed (1 disclosures) — Allocation of Resources Without Limits or Throttling

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
No Limit on Email Subscription Allocation of Resources Without Limits or Throttling thecyberjerry Low 2021-09-04
CSRF in changing password after using reset password link Cross-Site Request Forgery (CSRF) xenx Low 2021-05-27
Very long names on demo.openmage.org could redirect victim users to malicious url redirects via email contacts. Privacy Violation lmhu Medium 2021-04-29
No error thrown when IDOR attempted while editing address Misconfiguration merbin Medium 2021-04-26
Sharing products with Mail allows phishing attacks due to misconfiguration. Business Logic Errors grmx Medium 2021-04-25