com.reddit.frontpage vulernable to Task Hijacking (aka StrandHogg Attack) #1325649 Duplicate Input Validation and Logic Medium 2021-12-13 – 2 Email Verification Bypass And Get access to user's private invitation. #1350401 N/A Input Validation and Logic Medium 2021-10-21 – 3 CVE-2020-11022 #1812768 N/A Cross-site Scripting Medium 2023-05-18 – 3 Reflected XSS via File Upload #1816181 N/A Cross-site Scripting Medium 2023-05-18 – 4 Regular Expression Denial of Service vulnerability #1538157 Informative Denial of Service Medium 2022-04-12 – 6 Huge amount of Subdomains Takeovers at Reddit.com #1966262 Duplicate Access Control Medium 2023-05-18 – 8 XSS in redditmedia.com can compromise data of reddit.com #862882 N/A Cross-site Scripting Medium 2022-08-03 – 10 Open Redirect through POST Request in www.redditinc.com #1310230 Informative Open Redirect Medium 2022-07-08 – 10 No rate limit leads to spaming post #1206004 Duplicate Authentication Medium 2023-05-18 – 11 Missing rate limit in current password change settings leads to Account takeover #1170522 Duplicate Authentication Medium 2021-10-27 – 13 api keys leaked #1762927 Informative Access Control Medium 2022-11-10 – 16 Domain Takeover of Reddit.ru via DNS Hijacking #1226891 Valid Access Control Medium 2021-10-21 $500 20 Oauth Misconfiguration Lead To Account Takeover #1212374 Duplicate Access Control Medium 2021-10-21 – 21 Open Redirect on www.redditinc.com via `failed` query param bypass after fixed bug #1257753 #1285081 Valid Open Redirect Medium 2022-09-30 – 21 Third party app could steal access token as well as protected files using inAppBrowser Analysed #1122177 Valid Information Disclosure Medium 2021-10-27 – 32 Open Redirect on www.redditinc.com via `failed` query param Analysed #1257753 Valid Open Redirect Medium 2022-09-22 – 41 Race condition leads to Inflation of coins when bought via Google Play Store at endpoint https://oauth.reddit.com/api/v2/gold/android/verify_purchase Analysed #801743 Valid Race Conditions Medium 2021-10-27 – 42 IDOR to pay less for coin purchases on oauth.reddit.com via /api/v2/gold/paypal/create_coin_purchase_order in `order_id` parameter Analysed #1213765 Valid Input Validation and Logic Medium 2021-10-21 $500 42 Hash-Collision Denial-of-Service Vulnerability in Markdown Parser Analysed #1341957 Valid Denial of Service Medium 2021-10-21 – 44 CSRF (protection bypassed) to force a below 18 user into viewing an nsfw subreddit ! Analysed #1480569 Valid Cross-Site Request Forgery Medium 2022-06-16 – 47 Image queue default key of 'None' and GraphQL unhandled type exception Analysed #996041 Valid Memory Corruption Medium 2021-10-27 $500 65 Reddit talk promotion offers don't expire, allowing users to accept them after being demoted Analysed #1656380 Valid Insecure Direct Object Reference Medium 2022-10-03 – 72 Regression on dest parameter sanitization doesn't check scheme/websafe destinations Analysed #1962951 Valid Cross-site Scripting Medium 2023-06-03 $500 101 Infromation Disclosure To Use of Hard-coded Cryptographic Key #2353237 Duplicate Cryptography Medium 2024-02-06 – 238