Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
5 of 15,219 reports · 227 analysed so far
- #1083923ValidSharing products with Mail allows phishing attacks due to misconfiguration.OpenMage · Input Validation and Logic · 2021–38votes
- #1085743ValidNo error thrown when IDOR attempted while editing addressOpenMage · Misconfiguration and Insecure Design · 2021–33votes
- #1086752ValidCSRF in changing password after using reset password linkOpenMage · Cross-Site Request Forgery · 2021–24votes
- #1091957ValidVery long names on demo.openmage.org could redirect victim users to malicious url redirects via email contacts.OpenMage · Information Disclosure · 2021–14votes
- #1085079ValidNo Limit on Email SubscriptionOpenMage · Denial of Service · 2021–12votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.