Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program
samcurry.net | blog | #ai-security | #bug-bounty | #xss | #blind-xss | #tesla | #automotive-security | #model-3 | #samcurry-net
Summary
A blind XSS payload left in a Tesla Model 3's 'Name Your Vehicle' field fired months later from an internal tool when support handled a windshield repair—earning a $10,000 bounty from Tesla.
- Published
- Collected
--- id: 6574 title: "Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program" source_domain: samcurry.net source_url: "https://samcurry.net/cracking-my-windshield-and-earning-10000-on-the-tesla-bug-bounty-program" published_at: "2019-07-14T00:00:00Z" tags: ["ai-security", "bug-bounty", "xss", "blind-xss", "tesla", "automotive-security", "model-3", "samcurry-net"] phying_url: "https://phying.com/item/6574" lang: en --- # Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program ## Summary A blind XSS payload left in a Tesla Model 3's 'Name Your Vehicle' field fired months later from an internal tool when support handled a windshield repair—earning a $10,000 bounty from Tesla. ## Intelligence Metadata - **Sources:** samcurry.net - **Published:** 2019-07-14T00:00:00Z - **Original:** https://samcurry.net/cracking-my-windshield-and-earning-10000-on-the-tesla-bug-bounty-program - **Phying News:** https://phying.com/item/6574