New Relic: Cross site scripting in a subdomain of newrelic.com

Hi, I found a cross site scripting vulnerability in a subdomain of newrelic.com website. URL affetcted: http://download.newrelic.com/ Steps to reproduce: 1. Victim can send the link with his malicious script to gain the access of newrelic account. 2. Click on the below link...

New Relic: Potential sub-domain hijacking

Hey New Relic Security team, I noticed what appeared to be a configuration oversight and I wanted to mention it to you. The following domains are currently pointing to Fastly: fr.newrelic.com 151.101.192.207 es.newrelic.com 151.101.0.207 When you visit them, you should see something like this:...

New Relic: Open Redirect

This is a near identical issue to 131552. Upon going to this URL: https://rpm.newrelic.com/auth/newrelic?origin=///hackerone.com the user will be redirected to https://hackerone.com. If the user isn't already authorized, they'll be prompted to login, and then end up being redirected to HackerOne...

New Relic: Hyperlink Injection on adding active users

@japz discovered an issue with how some email clients render text. This issue was determined to be very low or no risk and was subsequently removed from our program's scope...

New Relic: XSS (Reflected)

@mrsharma reported an issue with a property hosted by a third-party provider. This issue was forwarded on to the provider for resolution...

New Relic for iOS Agent Denial of Service Vulnerability

New Relic for iOS Agent is a suite of cloud-based application monitoring and management platforms running on iOS and based on SaaS Software as a Service from New Relic. A denial of service vulnerability exists in New Relic for iOS Agent versions prior to 5.8.3. An attacker could exploit this...

New Relic: Stored Xss in rpm.newrelic.com

Hello, My Self ABDULWAHAB Today I Founded a Stored Xss in rpm.newrelic.com 1.Open Newrelic.com 2.Register a new account But In Company add Xss Code alert'XSS BY ABDULWAHAB'; 3.Complete Signup 4. Xss Code Executed Watch The Video Below Thanks, ABDULWAHAB Tested On:- OS: Windows 8.1 Browser: Chrome...

New Relic: SSO Authentication Bypass

Hi, As I reported to [email protected], here's the authentication bypass vulnerability report. I've left some details out in this report but you're welcome to reach out to me with any questions. Here's a more detailed overview: SSO Authentication Bypass Summary It is possible to POST a custom...

New Relic: Session Hijacking

Hi! I have found Session Hijacking Bug in your website www.newrelic.com from session hijacking an attacker can login to victim's account without any authentication. Video POC given Below...

New Relic for Android Denial of Service Vulnerability

New Relic for Android is a SaaS Software as a Service based cloud application monitoring and management platform for Android from New Relic. A denial of service vulnerability exists in New Relic for Android versions prior to 5.7.1. An attacker can exploit this vulnerability to cause a denial of...

New Relic: Java RMI (Remote Code Execution)

hello Guys while i was testing your site i found an interesting domain of newrelic which is pinger-master.newrelic.com and when i visit that domain it says unable to connect with the host the i quickly do nslookup and i got this results fish@punt $ nslookup pinger-master.newrelic.com Server:...

New Relic: Cookie Misconfiguration

1 install add ons "Edit this Cookie" in google chrome" 2 login your account/create an account 3 get the cookie using "edit this cookie" 4 logout the account 5 delete the current cookie using edit this cookie and put the cookie what you copy and refresh the tab Video...

New Relic: All Active user sessions should be destroyed when user change his password!

hello security, There is an user sessions issue on your application that should be fixed. Proof of Concept Suppose, you have an account on newrelic.com Somehow an attacker manage to get your password and logged in your account.. after knowing that your ID has been compromised what you'll do ? i...

New Relic: CSRF vulnerability that allows an attacker to purge plugin metric data

Vulnerability details A seemingly minor CSRF vulnerability exists in the endpoint that purges plugin metric data. When an admin visits the Agent overview of its account, it will show a button for each plugin that allows the admin to purge the data. This button links to a GET requests that is...

New Relic: Login CSRF vulnerability

Hi New Relic security team, While doing pentesting on your website, I found that while logging into the account the "authenticitytoken" was not properly validated. I was able to login into my account even without "authenticitytoken". Impact: High Steps to Reproduce: 1 Login to your account. 2 Whi...

New Relic: Leaking license key in source code

Restricted role user has no way to view the license key, but the license key is leaking in the source code. Steps to reproduce Assume userA is owner, userB is restricted user. Login as userB and go to https://rpm.newrelic.com/accounts/accid/applications/setup Select any Web agent, view page sourc...

New Relic: [alerts.newrelic.com] Scanning local network via notification channel

When setting a notification channel an attacker can sumbit a local link as the channel url, which allows him to scan the local network by sending test notifications. PoC: 1. Log into your account 2. Go to the notification channels page https://alerts.newrelic.com/accounts/%USERID%/channels 3...

New Relic: http://newrelic.com SSRF/XSPA

A Server Side Request Forgery / Cross Site Port Attack was discovered via a POST request to http://newrelic.com/syntheticspreviews and using the parameter within the body of the request testurl. A Server Side Request Forgery vulnerability allows to issue remote connections on behalf of the affect...

docs.newrelic.com XSS vulnerability

Vulnerable URL: https://docs.newrelic.com/search/node/a%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

New Relic: Open redirection bypass .

The following link bypasses the current protection : https://login.newrelic.com/login?returnto=https://rpm.newrelic.com/auth/newrelic?origin=///evil.com After entering the correct credentials , the above link will redirect to evil.com...