Bumble Program Statistics

View program

10 total issues disclosed

$4,450 total paid publicly

Most disclosed (2 disclosures) — Business Logic Errors

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Exfiltrating a victim's exact location (to within 5m) Information Disclosure robertheaton High 2021-07-21
Misconfigured oauth leads to Pre account takeover Business Logic Errors dhakal_bibek Low 2021-03-18
Bumble API exposes read status of chat messages Information Disclosure ndrong Medium 2021-03-13
Possible (we need to wait for some time) takeover of subdomain badootech.badoo.com which is pointing to Medium servers Business Logic Errors w2w Medium 2020-12-30
Identify unique user ID of all the profiles Insecure Direct Object Reference (IDOR) covertlyovert Medium 2020-12-25
Race Condition on "Get free Badoo Premium" which allows to get more days of free premium for Free. None supplied th4nu_0x0 Low 2020-12-07
On Singing up with a Phone number , The 4 digit OTP does not expires for a long time leading to an easy attack and make a verified account easilty Violation of Secure Design Principles godzkid High 2020-11-25
Bruteforce password recovery code Violation of Secure Design Principles 0x3c3e No rating 2020-01-18
SSO through odnoklassniki uses http rather than https Cleartext Transmission of Sensitive Information matthijsmelissen Low 2019-12-21
CSRF bug Cross-Site Request Forgery (CSRF) dark_heaven No rating 2017-06-12