Vulnerability classifications

Below are some of the vulnerability types we used to classify submissions made to the Bug Bounty program prior to our shift to the HackerOne platform. For a recent list of our Bounty researchers, check out our HackerOne leaderboard.

• Broken Authentication or Session Management
• Cross-Site Request Forgery (CSRF)
• Cross-Site Scripting (XSS)
• Injection
• Insecure Direct Object Reference
• Missing Function Level Access Control
• Security Misconfiguration
• Sensitive Data Exposure
• Unvalidated Redirect or Forward
• Using Components with Known Vulnerabilities
• Other