Grammarly Launches Public Bug Bounty Program

Online AI-based communications tool Grammarly is taking its private bug bounty program public in hopes of finding and fixing more vulnerabilities in its software. The company has run a private bug bounty program – which currently has 1,500 participants – in conjunction with HackerOne for over a...

Grammarly: Reflected Cross Site Scripting (XSS)

hi there, here is the link that fired XSS https://www.grammarly.com/blog/search/" Impact stealing cookies stealing data etc...

Grammarly: "More on Wikipedia" link disclose "Referrer" and leak `window.opener` reference for arbitrary websites

Summary: "Referrer" leak http:// link to Wikipedia transferring Referrer header allows a remote attacker with MITM access to sniff Referrer URL for important tokens after following "More on Wikipedia" link. Controllable page MITM with window.opener pointing to the navigation-initiated webpage...

Grammarly: Emails from Grammarly missing sanitization(lack of validation?) -> HTML injection in emails

Summary: Emails from Grammarly e.g. "reset password" email missing HTML sanitization. That leads to content spoofing in emails. Steps To Reproduce: 1. Go to "Profile" 2. Find reset password tab if you're logged in using FB/Google, you won't see this menu 3. Change email to something like:...

Grammarly: `socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extension

Summary 1. Attacker could trigger Grammarly extension's socket command using a crafted page to perform WS connectionand data sending from extension's background page with cookies and origin to any URL. 2. Additionally, commands received from the attacker's server are handled by extension and coul...

Grammarly: Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's origin

Summary: Attacker could trigger Grammarly extension's gnar.fetch command using a crafted page to perform XHR with cookies and any configurational params to any cross-origin resource. Description: Page could Init Grammarly popup editor no user gesture, helper Events have isTrusted property, which...

Grammarly: `open-url` command allows opening unlimited number of tabs pointing to arbitrary URLs

Summary Attacker could trigger Grammarly extension's open-url command to open any number of tabs pointing to any origin including internal, e.g. chrome:// and cause "infinite Chrome DoS" if attacker's page is pinned. Description Page could Init Grammarly popup editor no user gesture, helper Event...

Intel Makes Spectre Patch Progress, while Adobe Grapples with Latest Flash Bug

It’s been a busy week in InfoSec land, as Intel released a new Spectre patch, iOS source code was leaked online, and a zero-day Flash bug got exploited in the wild. Also making noise these past few days: A major security hole in the Grammarly web app, WordPress updates tripping over each other, a...

Grammarly Extension For Google Chrome Information Disclosure Vulnerability - Windows

Grammarly Spell Checker for Google Chrome is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Grammarly Extension For Google Chrome Information Disclosure Vulnerability - Mac OS X

Grammarly Spell Checker for Google Chrome is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Grammarly Extension For Google Chrome Information Disclosure Vulnerability - Linux

Grammarly Spell Checker for Google Chrome is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Critical Flaw in Grammarly Spell Checker Could Let Attackers Steal Your Data

A critical vulnerability discovered in the Chrome and Firefox browser extension of the grammar-checking software Grammarly inadvertently left all 22 million users' accounts, including their personal documents and records, vulnerable to remote hackers. According to Google Project Zero researcher...

CVE-2018-6654

The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr-ifr, because the exposure of these tokens is not restricted to any specific web site...

CVE-2018-6654

The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr-ifr, because the exposure of these tokens is not restricted to any specific web site...

Authentication flaw

The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr-ifr, because the exposure of these tokens is not restricted to any specific web site...

CVE-2018-6654

CVE-2018-6654 refers to a vulnerability in the Grammarly Chrome extension (pre-2018-02-02) where remote attackers could uncover authentication tokens via an action: "user" request to iframe.gr_-ifr. The exposure stems from tokens not being restricted to a specific website, enabling token disclosu...

CVE-2018-6654

The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr-ifr, because the exposure of these tokens is not restricted to any specific web site...

Grammarly Information Disclosure Vulnerability

Grammarly extension for Chrome is a grammar checking extension for Chrome based on Grammarly, Inc. A security vulnerability exists in Grammarly extension for Chrome versions prior to 2018-02-02, which stems from the fact that authentication tokens can be accessed from any website. A remote attack...

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

UPDATE Grammarly has fixed a bug with its Chrome browser extension that exposed its authorization tokens to websites, allowing sites to assume the identity of a user and view their account’s documents. “I’m calling this a high severity bug, because it seems like a pretty severe violation of user...

grammarly.com XSS vulnerability

Vulnerable URL: https://www.grammarly.com/blog/?p=" Details: Description| Value ---|--- Patched:| Yes, at 09.10.2017 Latest check for patch:| 09.10.2017 13:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 811 VIP website status:| Yes Coordinated Disclosure...