Improper Validation at Partners Login Analysed #990048 Valid Authentication Critical 2021-10-06 $2,000 251 [www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive information Analysed #426165 Valid No weakness recorded Medium 2018-11-28 $550 246 SQL Injection in www.hyperpure.com Analysed #1044716 Valid Command and Code Injection Critical 2021-02-22 $2,000 229 Information Disclosure through Sentry Instance ███████ Analysed #697512 Valid Information Disclosure High 2019-09-19 $750 178 [www.zomato.com] Leaking Email Addresses of merchants via reset password feature Analysed #293490 Valid Access Control – 2021-02-18 – 113 Login to any account with the emailaddress Analysed #245408 Valid Authentication High 2017-08-17 $1,000 103 Subdomain takeover of fr1.vpn.zomans.com Analysed #1182864 Valid Input Validation and Logic Medium 2021-09-17 $350 99 Base alpha version code exposure Analysed #167859 Valid Information Disclosure – 2016-10-14 – 99 credentials leakage in public lead to view dev websites Analysed #511440 Valid Information Disclosure Low 2019-03-18 – 78 Page has a link to google drive which has logos and a few customer phone recordings Analysed #864712 Valid Cryptography Medium 2022-02-21 $200 76 [https://reviews.zomato.com] Time Based SQL Injection Analysed #300176 Valid SQL Injection Critical 2018-02-02 $1,000 72 [www.zomato.com] Blind SQL Injection in /php/geto2banner Analysed #838855 Valid SQL Injection Critical 2020-08-10 $2,000 68 [Zomato Android/iOS] Theft of user session Analysed #328486 Valid No weakness recorded – 2018-06-17 – 68 subdomain takeover on fddkim.zomato.com Analysed #1130376 Valid Access Control Medium 2022-01-27 – 61 Open AWS S3 bucket leaks all Images uploaded to Zomato chat Analysed #507097 Valid Authentication Medium 2019-05-01 – 57 [www.zomato.com] Blind SQL Injection in /php/widgets_handler.php Analysed #836079 Valid SQL Injection Critical 2020-08-10 $2,000 54 [Zomato for Business Android] Vulnerability in exported activity WebView Analysed #537670 Valid No weakness recorded Medium 2021-09-23 – 52 [auth2.zomato.com] Reflected XSS at `oauth2/fallbacks/error` | ORY Hydra an OAuth 2.0 and OpenID Connect Provider Analysed #456333 Valid Cross-site Scripting Medium 2019-01-21 – 51 Attacker shall recieve order updates on whatsapp for users who have activated whatsapp notification Analysed #1523584 Valid Input Validation and Logic Medium 2022-04-06 – 37 Unauthorised Access to Anyone's User Account Analysed #202921 Valid Authentication Critical 2017-03-28 – 32 Admin Access to a domain used for development and admin access to internal dashboards on that domain Analysed #271407 Valid Access Control – 2017-12-28 – 31 CORS Misconfiguration on www.zomato.com Analysed #168574 Valid No weakness recorded – 2017-06-30 – 31 Possible to enumerate Addresses of users using AddressId and guessing the delivery_subzone Analysed #514897 Valid Insecure Direct Object Reference Medium 2020-07-15 $1,500 29 [█████████] Hardcoded credentials in Android App Analysed #246995 Valid Authentication Critical 2017-07-19 $500 28