Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
3 of 15,219 reports · $600 in bounties · 227 analysed so far
- #214001ValidFile access controls incorrectly enforced for files shared via QuickLink - Unshared files can be accessedFiles.com · No weakness recorded · 2017$60029votes
- #174645ValidExistence of Folder path by guessing the path through responseFiles.com · Information Disclosure · 2017–15votes
- #208734ValidCSRF @ configurationFiles.com · Cross-Site Request Forgery · 2017–8votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.