Escaping the iframe via exceptions #103989 Valid Cross-site Scripting – 2015-12-29 – – Password Functionality not working correctly #255708 Informative No weakness recorded – 2017-08-03 – 1 Frameset(Frame) html tag is allowed in html editor.(can lead to clickjacking) #285609 Valid Misconfiguration and Insecure Design Low 2018-02-14 – 1 Possible clickjacking at shop.khanacademy.org #6370 Informative Misconfiguration and Insecure Design – 2014-05-08 – 2 CRLF Injection #13314 Informative Cross-Site Request Forgery – 2014-08-07 – 2 Rate Limitation Vulnerability (DDos) #209860 Duplicate Denial of Service – 2018-04-17 – 2 https://www.khanacademy.org/login open-redirect #6357 Valid Open Redirect – 2014-04-09 – 3 Full Path Disclosure on [smarthistory.khanacademy.org] #6362 Valid Information Disclosure – 2014-04-11 – 3 User guessing/enumeration at sw.khanacademy.org #6376 Informative Information Disclosure – 2014-04-15 – 3 https://www.khanacademy.org/coach/reports/activity XSS #6409 Valid Cross-site Scripting – 2014-04-09 – 3 Suffix of url-path is vulnerable to XSS-attack #13285 Valid Cross-site Scripting – 2014-09-16 – 3 Unchecking hidden parameter is vulnerable to XSS-attack #13506 Informative Cross-site Scripting – 2014-08-07 – 3 XSS vulnerability in "/coach/roster/" ( create your first class) #111763 Valid Cross-site Scripting – 2016-02-12 – 3 SSL/TLS Vulnerability at khanacademy.org #207457 Informative Cryptography – 2017-02-22 – 3 Weak Bithdate Validation Implemented on Sign Up #257194 Informative Misconfiguration and Insecure Design – 2017-08-14 – 3 http://smarthistory.khanacademy.org/search-results.html XSS #6344 Valid Cross-site Scripting – 2014-04-09 – 4 Dom based XSS https://www.khanacademy.org/ #6352 Valid Cross-site Scripting – 2014-04-09 – 4 Stored XSS {dangerous?} https://www.khanacademy.org/coach/roster/?listId=allStudents #6369 Valid Cross-site Scripting – 2014-04-09 – 4 Lighttpd version disclosure / directory listing #6371 Valid Information Disclosure – 2014-04-12 – 4 CSRF - Adding/Removing items to cart - shop.khanacademy.org #6378 Informative Cross-Site Request Forgery – 2014-05-08 – 4 Sql injection And XSS #31023 Valid Cross-site Scripting – 2015-12-08 – 4 Persistent class XSS [the fuck] #6412 Valid Cross-site Scripting – 2014-04-09 – 5 Open Redirection in SmartHistory KhanAcademy #6564 Valid Open Redirect – 2014-04-09 – 5 Html injection on khanacademy #83604 Valid Command and Code Injection – 2015-12-14 – 5 No Security check at changing password and at adding mobile number which leads to account takeover and spam #207552 Informative Misconfiguration and Insecure Design – 2017-02-21 – 5 RTL override char allowed at khanacademy redirect page #641640 Informative Misconfiguration and Insecure Design Low 2019-08-02 – 5 The web app's forgot password page is vulnerable to text injection/content spoofing #159213 Valid Command and Code Injection – 2017-03-01 – 6 Possible to join any class without coache's knowledge & Little Information Disclosure #266090 Valid Input Validation and Logic – 2017-10-12 – 6 XSS at http://smarthistory.khanacademy.org #6575 Valid Cross-site Scripting – 2014-04-09 – 7 SignUp With Fake Email #403803 Informative Input Validation and Logic Medium 2018-09-05 – 7 Khan Academy ClickJacking to Steal Users's Credintials #639682 Valid No weakness recorded – 2021-03-31 – 7 Stored 'undefined' Cross-site Scripting #403793 Informative Cross-site Scripting Medium 2018-09-05 – 8 XSS through document projects #244902 Valid Cross-site Scripting – 2018-03-30 – 9 CSRF token fixation and potential account takeover #308394 Valid Misconfiguration and Insecure Design Medium 2018-04-19 – 9 Possible Subdomain Takeover #399165 Valid No weakness recorded Medium 2018-08-31 – 9 Possible Take Over Subdomain For Inbound Emails #403822 Valid No weakness recorded Medium 2018-11-08 – 9 Cross site scripting (content-sniffing) #438953 Valid Cross-site Scripting Medium 2018-12-08 – 9 Unauthorised Account Detail Modification #868146 Valid Access Control High 2020-06-19 – 9 Weak Ciphers Enabled #6488 Valid Information Disclosure – 2014-04-09 – 10 Users can make accounts with a fake email address. #548587 Informative No weakness recorded Low 2019-04-25 – 11 Password authentication when changing information bypass. Bypass of report #721341 #1040373 Valid Authentication High 2021-02-11 – 11 https://mathfacts.khanacademy.org/ includes code from unprivileged localhost port #331752 Valid Command and Code Injection Medium 2019-05-25 – 12 CSV Injection Via Student Password/Name Leads To Client Side RCE And Reading Client Files #943255 Valid Command and Code Injection Medium 2020-08-27 – 12 Bypass the fix of report #1078283 due to poor validation #1212337 Valid Open Redirect High 2021-07-08 – 14 POST XSS in https://www.khanacademy.org.tr/ via page_search_query parameter #382321 Valid Cross-site Scripting Medium 2018-09-18 – 16 The endpoint /api/internal/graphql/requestAuthEmail on Khanacademy.or is vulnerable to Race Condition Attack. #1293377 Valid Input Validation and Logic Medium 2022-03-22 – 17 OPEN URL REDIRECT through PNG files #163272 Valid Cross-site Scripting – 2017-02-17 – 18 Enumerate class codes via yahoo dork - Can access any course under teacher - Sensitive information leaked #1514356 Valid Information Disclosure High 2022-05-01 – 18 Sensitive information/action is stored/done is done using a GET request #163820 Valid Cross-Site Request Forgery – 2019-06-23 – 20 [critical] sql injection by GET method #319279 Valid SQL Injection High 2018-03-06 – 22