Able To Change Username

[realharmz]

Summary:

Able To Change Username.

Description:

Hi there, i recently started to create gigs so i can earn some money during the quarantine.

I’m a software developer and bug bounty hunter. I found out a bug which allows you to change your username. You can even change the username to an already existing fiverr username which then over-writes the username with your account. All links from the first user are then inaccessibile, which can lead to people being unable to purchase his gigs or contact him.

Also does Fiverr have a bug bounty programme?

~ HarmZ

[frank_d]

Hi there. That sounds like a pretty serious vulnerability.

Fiverr has no bounty program in place but you should definitely email them via customer support.

I’m sure they will want to know about that.

[realharmz]

Hi there. That sounds like a pretty serious vulnerability.

Fiverr has no bounty program in place but you should definitely email them via customer support.

I’m sure they will want to know about that.

Thanks, just created a ticket.