How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours
hackerone.com | vulnerability | #bug-bounty | #attack-surface | #xss | #hackerone | #blind-xss | #mergers-acquisitions | #pullrequest
Summary
After acquiring PullRequest, HackerOne added its assets to its own bug bounty and got nearly two dozen reports within 48 hours, including a blind XSS in a rating form that had lurked for five years.
- Published
- Collected
--- id: 2756 title: "How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours" source_domain: hackerone.com source_url: "https://www.hackerone.com/blog/how-bug-bounty-uncovered-5-year-old-vulnerability-hours" published_at: "2022-06-16T11:00:00Z" tags: ["bug-bounty", "attack-surface", "xss", "hackerone", "blind-xss", "mergers-acquisitions", "pullrequest"] phying_url: "https://phying.com/item/2756" lang: en --- # How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours ## Summary After acquiring PullRequest, HackerOne added its assets to its own bug bounty and got nearly two dozen reports within 48 hours, including a blind XSS in a rating form that had lurked for five years. ## Intelligence Metadata - **Sources:** hackerone.com - **Published:** 2022-06-16T11:00:00Z - **Original:** https://www.hackerone.com/blog/how-bug-bounty-uncovered-5-year-old-vulnerability-hours - **Phying News:** https://phying.com/item/2756