260 matches found
New Relic: Manipulation of submit payment request allows me to obtain Infrastructure Pro/Other Services for free or at greatly reduced price
@jonbottarini discovered an issue with our purchase process validation. This allowed subscription purchases to complete, even when they did not equal the intended price for the service provided. I wanted to test the New Relic pro features. I didn't want to pay full price I hacked the payment page...
New Relic: Privilege Escalation in Share Report
Hello, I would like to report about Privilege Escalation on synthetics.newrelic.com domain. You can enable report sharing for monitor without permission. In order to reproduce it, do the following steps: 1 Login as company administrator 2 Navigate to...
New Relic: Privilege Escalation in Default Notification Preferences
Hello, I would like to report about Privilege Escalation on rpm.newrelic.com domain. You can change other company's user default notification preferences. In order to reproduce it, do the following steps: 1 Login as company administrator 2 Navigate to...
New Relic: Unvalidated redirect in alerts.newrelic.com/auth/newrelic?origin=
Affected host: alerts.newrelic.com Affected resource: /auth/newrelic Affected GET parameter: origin PoC: 1. Go to https://alerts.newrelic.com/auth/newrelic?origin=.example.com 2. If you don't have an active session, you'll need to login with your New Relic credentials 3. You'll be taken to...
New Relic: Sensitive information disclosure
I am able to download ciritcal files which include newrelic environment setup, setting uo of database which also says which database is used etc. I am able to access this information using a google dork Google dork:site:newrelic.com ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw |...
New Relic: Directory listing - i am able to download all php_agent archive
While playing around to access some private information on newrelic.com i was able to get access to critical files which are not supposed disclose publically. i am able to download all archived files. Google Dork:site:newrelic.com intitle:index.of Real Proof:...
New Relic: [docs-ra.newrelic.com] subdomain and Drupal takeover via unconfigured endpoint
Hi, While conducting New Relic web property reconnaissance, I came across the unused docs-ra.newrelic.com endpoint. This endpoint allowed an unauthenticated user to progress through the Drupal installation process and activate the site with their own configuration – it appears that valid MySQL...
New Relic: Open redirection
Hey, URL : https://rpm.newrelic.com/auth/newrelic?origin=http:/example.com/ To reproduce: 1 login 2 go to https://rpm.newrelic.com/auth/newrelic?origin=http:/example.com/ You will be redirected to http://example.com Thank you!...
New Relic: Broken Authentication and session management OWASP A2
@honc reported an issue with session expiration. We determined that this report was invalid, and it was self-closed by the researcher. Insufficient Session Expiration vulnerability...
New Relic: Restricted user is able to delete filter sets of admin users in https://infrastructure.newrelic.com/accounts/{{ACC#}}/settings/filterSets
At this endpoint: https://infrastructure.newrelic.com/accounts/████/settings/filterSets the application does not properly check to ensure that a user with restricted settings is able to delete filters of other users, including a filter of an admin. Step by step instructions 1. Admin creates a New...
New Relic: Logic flaw enables restricted account to access account license key
Hello - this is a resubmission of my report 197071 that was sent to the public NewRelic program. You have a serious logic flaw which results in a restricted account being able to view the account license key. This is able to be performed by logging into a restricted account, clicking on the...
New Relic: Restricted User is able to edit Alert Conditions of Synthetics Monitors even if Synthetics Permissions is enabled by an admin
In this vulnerability, a restricted user is able to edit the alert conditions of a synthetics monitor, even if he is unauthorized to do so. Steps to reproduce: - Admin user invites User1 to New Relic account as a restricted user - User1 accepts invitation, joins the account - Admin goes to...
New Relic: Moniter Failed Sends too many emails
Hello, While i was testing your program i found one vulnerabilty in your program, Steps To Reproduce 1. Go here https://newrelic.com/, and click on signup button. 2.Then put Javascript alert in Name field You can try any name too 3. Then put javascript:alertdocument.domain in You company field Yo...
New Relic: Stored XSS on BillingCountry parameter
Domain Affected:...
docs.newrelic.com XSS vulnerability
Vulnerable URL: https://docs.newrelic.com/search/node/%22%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinat...
New Relic: Cross site scripting in a subdomain of newrelic.com
Hi, I found a cross site scripting vulnerability in a subdomain of newrelic.com website. URL affetcted: http://download.newrelic.com/ Steps to reproduce: 1. Victim can send the link with his malicious script to gain the access of newrelic account. 2. Click on the below link...
New Relic: Potential sub-domain hijacking
Hey New Relic Security team, I noticed what appeared to be a configuration oversight and I wanted to mention it to you. The following domains are currently pointing to Fastly: fr.newrelic.com 151.101.192.207 es.newrelic.com 151.101.0.207 When you visit them, you should see something like this:...
New Relic: Open Redirect
This is a near identical issue to 131552. Upon going to this URL: https://rpm.newrelic.com/auth/newrelic?origin=///hackerone.com the user will be redirected to https://hackerone.com. If the user isn't already authorized, they'll be prompted to login, and then end up being redirected to HackerOne...
New Relic: Hyperlink Injection on adding active users
@japz discovered an issue with how some email clients render text. This issue was determined to be very low or no risk and was subsequently removed from our program's scope...