Lichess Bug Bounty Program Statistics | BugBountyHunter.com

**You are viewing our old website - new website soon...!**

We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.

Stay tuned for updates coming soon!

Lichess Program Statistics

9 total issues disclosed

$0 total paid publicly

Most disclosed (2 disclosures) — None supplied

Disclosed Reports

Report Title	Vulnerability Type	Disclosed By	Severity	Disclosed on
Unauthorized Blogs Creation	Improper Access Control - Generic	albetisi	Low	2025-09-02
CSRF at Network feature	Cross-Site Request Forgery (CSRF)	psfauzi	Medium	2025-07-08
Improper Authentication Throttling Allows Attacker-Controlled Account Lockouts	Improper Restriction of Authentication Attempts	closec4ll	Medium	2025-06-13
Path Traversal Vulnerability in Lila Project	Path Traversal: '.../...//'	immm	High	2025-06-09
ImageId Format Injection in Image Upload Endpoint	Improper Input Validation	oblivionsage	Medium	2025-06-06
Server-Side Request Forgery (SSRF) via Game Export API	Server-Side Request Forgery (SSRF)	oblivionsage	Critical	2025-06-03
Weak Rate Limiting Controls in the (LOGIN) page Expose System to Brute Force and DoS Attacks	None supplied	hajjaj0x	Critical	2025-05-15
Open Redirect Vulnerability in OAuth Flow Leading to Potential Phishing Attack	Open Redirect	delsec_	Low	2025-05-15
Direct IP Access to Website	None supplied	ryomenshuvro	Critical	2025-04-11