Intel · bug bounty

Disclosed bug bounty reports

Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.

SortMost upvoted

StatusAny

DisclosedAny year

WeaknessAny class

Access (analysis)Not clear from the report

TechniqueAny

Basecamp Clear

1 of 15,219 reports · $7,500 in bounties · 161 analysed so far

#1211724ValidAnalysedHTTP Request Smuggling via HTTP/2Basecamp · Injection and Smuggling · 2021 · needs: not clear from the report · Request smuggling$7,500300votes

The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.