Curated security research, vulnerabilities, advisories and tools for practitioners.

HackenProof Customer Story: Uklon

hackenproof.com | blog | #bug-bounty | #xss | #idor | #case-study | #hackenproof | #uklon

📄 Raw .md⬇️ Download .md 🔗 Original ↗

Summary

A Hacken Cup customer story on Ukrainian ridesharing app Uklon: the vulnerabilities hunters found, from a self-XSS escalatable to reflected XSS to an IDOR exposing driver images.

Published: 2026-06-05 10:28
Collected: 2026-07-25 16:03

---
id: 5374
title: "HackenProof Customer Story: Uklon"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/hackenproof-customer-story-uklon"
published_at: "2026-06-05T10:28:21Z"
tags: ["bug-bounty", "xss", "idor", "case-study", "hackenproof", "uklon"]
phying_url: "https://phying.com/item/5374"
lang: en
---

# HackenProof Customer Story: Uklon

## Summary

A Hacken Cup customer story on Ukrainian ridesharing app Uklon: the vulnerabilities hunters found, from a self-XSS escalatable to reflected XSS to an IDOR exposing driver images.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2026-06-05T10:28:21Z
- **Original:** https://hackenproof.com/blog/hackenproof-customer-story-uklon
- **Phying News:** https://phying.com/item/5374