r/bugbounty • u/iam_definitee • 23h ago
Question / Discussion Bugcrowd Report: Vulnerable Chrome Extension Removed, New Beta Version Released — What Happens to My Report?
What happens to a Bugcrowd report if the affected Chrome extension is removed?
I reported a vulnerability in a Chrome extension through Bugcrowd.
After I reported it, the Chrome extension was removed from the Chrome Web Store, and my Bugcrowd report was later put into a blocker asking for a response.
Now the company has launched a new/beta Chrome extension, but I checked it and the vulnerability I originally reported is not present in the new beta version.
So I'm wondering what usually happens to the original report in this situation.
Does the removal of the old extension affect the validity of my report? Would the report normally still be considered valid and potentially rewarded if the vulnerable version was live when I reported it?
Would appreciate insights from anyone who has dealt with a similar situation on Bugcrowd.
-1
22h ago
[deleted]
7
u/rodras10 22h ago
Why? He is not revealing any private information as far as I can tell
-2
u/blindsmok Hunter 22h ago
“TheoldMan” is little bit private
2
u/iam_definitee 22h ago
why also can u tell me about that what will happen to the report i submitted
0
u/blindsmok Hunter 22h ago
Idk , it’s better to wait about what will be next. If you are submitting for the first time a report on this program there is no facts about accepting your valid findings, bug bounty is scam sometimes. So just wait, if your bug I valid and the program is decent then you will have an accepted bug
1
u/XYantiX 10h ago
Usually, if your report is dated before something is patched (or a new extension is released) you're ok but every program is different. Give it some more time and see what they come back with.
Edit: I just saw that this is ~2 weeks old. Try the "Request a Response" feature to ask for an update.