{"id":"6f0287aa-9a15-41b6-865c-1161a0876d21","engagementId":"fe364334-e2ec-4dc8-9d68-0430fcce85ad","data":{"brief":{"id":"077cafd2-47df-4bd3-be90-c14a772f80f1","name":"BitDiscovery","tagline":"Vulnerability Disclosure Program - Powered by Bugcrowd","description":"\u003cp\u003eBitDiscovery values the input of the security community to create a more secure Internet and welcomes the opportunity to collaborate with community members who share this common goal.\u003c/p\u003e\n\n\u003cp\u003eThis coordinated vulnerability disclosure program (VDP) is limited to security vulnerabilities identified within BitDiscovery's public online presence. Please review the program contents before submitting your findings.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRatings:\u003c/h2\u003e\n\n\u003cp\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/p\u003e","industryTagId":"02370343-bf13-4661-a7a2-caa1c1076ad1","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as In-Scope. \u003cem\u003eAny domain/property of BitDiscovery not listed in the targets section is out of scope. This includes any/all subdomains not listed above.\u003c/em\u003e If you believe you've identified a vulnerability on a system outside the scope, please reach out to support@bugcrowd.com before submitting.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"5b4ed02c-cced-4451-a516-cc4ab807ac40","name":"████████████████","targets":[{"id":"dbc9ac1c-938a-4053-bb36-2449f7f4dda8","uri":null,"name":"███████████████████████████","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6e4886a0-759a-4723-a64b-69f6a2ca07a8","sortOrder":0},"sortOrder":0,"tags":[{"id":"3585ef4a-cd09-429b-ad25-5777064e59c5","name":"Moment.js","targetId":"dbc9ac1c-938a-4053-bb36-2449f7f4dda8"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"dbc9ac1c-938a-4053-bb36-2449f7f4dda8"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"dbc9ac1c-938a-4053-bb36-2449f7f4dda8"}],"recentChangeFlags":null},{"id":"63e84805-c09a-4a05-8c24-f96d75228daf","uri":null,"name":"██████████████████","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"42953353-50ea-4c73-bd4d-8cf6183f6fe5","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"63e84805-c09a-4a05-8c24-f96d75228daf"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"63e84805-c09a-4a05-8c24-f96d75228daf"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"63e84805-c09a-4a05-8c24-f96d75228daf"}],"recentChangeFlags":null},{"id":"b16af8e8-2570-4d5e-9099-d79dda544bfb","uri":null,"name":"████████████████████████████████████████████████████████████████████████████","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"04faa4c2-b7f0-47a6-8b20-3e9f2f7ee01c","sortOrder":0},"sortOrder":0,"tags":[{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"b16af8e8-2570-4d5e-9099-d79dda544bfb"},{"id":"e591e8bc-d7f4-49ad-952f-98dee6c92653","name":"DNS","targetId":"b16af8e8-2570-4d5e-9099-d79dda544bfb"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"fe364334-e2ec-4dc8-9d68-0430fcce85ad","code":"bitdiscovery","state":"in_progress_paused","endsAt":null,"bountyId":"7887084c-c807-4cbe-85d8-ad1707247864","startsAt":"2019-11-20T08:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Computer Software","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/103c/b7e7/b0f516a4/02ac1f6f4bbf78cc23351606b3041ccb_24492255_300x300.jpeg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":"Paused until further notice","lastTransitionAt":"2023-07-26T12:01:47.795Z","cancellationReason":null,"statusLabel":"In progress paused","routesPaths":{"brief":"/engagements/bitdiscovery","changelogs":"/engagements/bitdiscovery/changelog","submissions":null,"announcements":"/engagements/bitdiscovery/announcements","hallOfFame":"/engagements/bitdiscovery/hall_of_fames","crowdstream":"/engagements/bitdiscovery/crowdstream"},"announcementsCount":1,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":null,"methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=bitdiscovery\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/bitdiscovery/engagement_subscribers","engagementChangelogsUrl":"/engagements/bitdiscovery/changelog","publishedAt":"2021-07-12T20:17:51.153Z","engagementChangelogUrl":"/engagements/bitdiscovery/changelog/6f0287aa-9a15-41b6-865c-1161a0876d21","createUserFeedbacksUrl":"/engagements/bitdiscovery/feedbacks","engagementCrowdstreamUrl":"/engagements/bitdiscovery/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}