---
id: 2756
title: "How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/how-bug-bounty-uncovered-5-year-old-vulnerability-hours"
published_at: "2022-06-16T11:00:00Z"
tags: ["bug-bounty", "attack-surface", "xss", "hackerone", "blind-xss", "mergers-acquisitions", "pullrequest"]
phying_url: "https://phying.com/item/2756"
lang: en
---

# How Bug Bounty Uncovered A 5-Year-Old Vulnerability In Hours

## Summary

After acquiring PullRequest, HackerOne added its assets to its own bug bounty and got nearly two dozen reports within 48 hours, including a blind XSS in a rating form that had lurked for five years.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2022-06-16T11:00:00Z
- **Original:** https://www.hackerone.com/blog/how-bug-bounty-uncovered-5-year-old-vulnerability-hours
- **Phying News:** https://phying.com/item/2756