3 ms·

Google's bug bounty has a $7.5K max on "Vulnerabilities giving access to client or authenticated session of the logged-in victim." See here: https://www.google

Google's bug bounty has a $7.5K max on "Vulnerabilities giving access to client or authenticated session of the logged-in victim." See here: https://www.google.com/about/appsecurity/reward-program/index.html https://www.google.com/about/appsecurity/reward-program/inde... I guess they were awarded $6K instead of the full because they didn't demonstrate it against more substantial properties. But either way the ceiling is quite low on these classes of vulnerabilities.

dessant 7y ago
That payout is indeed quite low, especially because access to an authenticated client session could lead to compromised Google servers when the vulnerability affects web services used by Google employees.
- bagacrap 7y ago
  Not really. Anything prod related is behind VPN.
ehsankia 7y ago
And it's not clear that such an exploit exists. Just because HenHouse happened to use the regex that way doesn't mean other places are, and that a similar exploit exists in the other products. I'm curious to know, but I'd think that the author would've tried to also exploit it in those other apps, and the fact that it's not documented here may be because they didn't find any issues with the other ones? It's a pretty generic regex that has many uses, and may be used for other stuff in other places.