---
id: 5374
title: "HackenProof Customer Story: Uklon"
source_domain: hackenproof.com
source_url: "https://hackenproof.com/blog/hackenproof-customer-story-uklon"
published_at: "2026-06-05T10:28:21Z"
tags: ["bug-bounty", "xss", "idor", "case-study", "hackenproof", "uklon"]
phying_url: "https://phying.com/item/5374"
lang: en
---

# HackenProof Customer Story: Uklon

## Summary

A Hacken Cup customer story on Ukrainian ridesharing app Uklon: the vulnerabilities hunters found, from a self-XSS escalatable to reflected XSS to an IDOR exposing driver images.

## Intelligence Metadata

- **Sources:** hackenproof.com
- **Published:** 2026-06-05T10:28:21Z
- **Original:** https://hackenproof.com/blog/hackenproof-customer-story-uklon
- **Phying News:** https://phying.com/item/5374