Pixiv


3 total issues disclosed

$2,000 total paid publicly


Most disclosed (1 disclosures) — Cross-Site Request Forgery (CSRF)

View disclosed reports



Disclosed Reports


Report Title Vulnerability Type Disclosed By Severity Disclosed on
Reset any password Weak Password Recovery Mechanism for Forgotten Password noxx High 2021-03-31
XSS reflected on [https://www.pixiv.net] Cross-site Scripting (XSS) - Reflected bcobain23 Medium 2020-12-17
CSRF at https://chatstory.pixiv.net/imported Cross-Site Request Forgery (CSRF) katsuragicsl Medium 2020-07-02