{"id":"68e42953-6e69-443a-b56f-7f1f33a636ed","engagementId":"e28af53c-8b7d-40bc-a0b9-a220678b40f3","data":{"brief":{"id":"e131acc5-de0b-4025-b8ff-da8a047069af","name":"City of Vienna Managed Bug Bounty","tagline":"Please submit your finding to the City of Vienna's Bug Bounty!","description":"\u003cp\u003eThe Vienna City Administration is the largest employer in Vienna. It stands for social responsibility and accountability, reliability, and clear structures. About 67,000 staff members work for the different units and departments of the City Administration and in the city’s independent enterprises – the Vienna Hospital Group, the public housing association Wiener Wohnen, and the local wastewater management. \u003c/p\u003e\n\n\u003cp\u003eNo technology is perfect and City of Vienna believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our assets.\u003c/p\u003e\n\n\u003cp\u003eGood luck, and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this engagement will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"2a38890b-c88e-4bc0-8db0-02059f3fafe6","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of City of Vienna not listed in the targets section is out of scope.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess\u003c/h2\u003e\n\n\u003ch3\u003eCredentials\u003c/h3\u003e\n\n\u003cp\u003eAccounts on all publicly facing targets can be self-provisioned \u003ca href=\"https://www.wien.gv.at/info/benutzerregistrierung.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e or \u003ca href=\"https://mein.wien.gv.at/Registrieren\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e. Please sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://docs.bugcrowd.com/researchers/participating-in-program/your-bugcrowdninja-email-address/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eExclusions\u003c/h2\u003e\n\n\u003cp\u003eThe following submission types are excluded from our program:\u003cbr\u003e\n     - \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eP4 vulnerabilities\u003c/a\u003e\u003cbr\u003e\n     - \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eP5 vulnerabilities\u003c/a\u003e\u003cbr\u003e\n     - CSRF Vulnerabilities\u003cbr\u003e\n     - No Rate Limiting\u003cbr\u003e\n     - DMARC, DKIM or SPF related issues\u003cbr\u003e\n     - Request Smuggling Vulnerabilities (we are currently fixing them on our central systems and will include them again after fixing)\u003c/p\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eAny Domain or IP not listed in the scope section\u003c/li\u003e\n\u003cli\u003eAny of our support or contact forms\u003c/li\u003e\n\u003cli\u003eUser data that does not belong to accounts that you have created or been provided\u003c/li\u003e\n\u003cli\u003ePhishing Attempts\u003c/li\u003e\n\u003cli\u003eDistributed or Load Based Denial-of-Service Attacks (single Request Denial-of-Service Attacks are considered in scope)\u003c/li\u003e\n\u003cli\u003eLeaked Credentials from leak databases or purchased from others\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eN-Day Policy\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eWhen N-Day bugs are released to the public, we will consider these as in scope \u003cem\u003eafter\u003c/em\u003e 21 days has gone by\n\n\u003cul\u003e\n\u003cli\u003ee.g: N-day released on 01/01/2025, we would consider it in-scope on 01/22/2025\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire through the \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support Portal\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"967d75e3-6233-4302-b920-1253839714ee","name":"In scope","targets":[{"id":"81984017-944a-47a8-9d58-cd4fe53ca86d","uri":"https://www.wien.gv.at","name":"www.wien.gv.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1a1cf715-1249-442f-aa92-a3005da47f44","sortOrder":0},"sortOrder":0,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"81984017-944a-47a8-9d58-cd4fe53ca86d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"81984017-944a-47a8-9d58-cd4fe53ca86d"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"81984017-944a-47a8-9d58-cd4fe53ca86d"}],"recentChangeFlags":null},{"id":"70e9b308-9b9f-4173-80ca-c5b6ba935575","uri":"https://*.wien.gv.at","name":"*.wien.gv.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0152a0be-27dd-4aca-a402-deb69fc03fae","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"70e9b308-9b9f-4173-80ca-c5b6ba935575"}],"recentChangeFlags":null},{"id":"9a30c2d0-eedc-43a3-8cb8-e2c950cfbb20","uri":"https://*.magwien.gv.at","name":"*.magwien.gv.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc091bb5-024d-4e66-a239-a199b234badd","sortOrder":2},"sortOrder":2,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9a30c2d0-eedc-43a3-8cb8-e2c950cfbb20"}],"recentChangeFlags":null},{"id":"eb94bc0e-5dc4-4a26-ae2d-152f35f3e8ac","uri":"https://www.gesundheitsverbund.at","name":"www.gesundheitsverbund.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"af19d328-0fea-4f4c-83f2-f06357a5bbe1","sortOrder":3},"sortOrder":3,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"eb94bc0e-5dc4-4a26-ae2d-152f35f3e8ac"}],"recentChangeFlags":null},{"id":"a29f7d82-ccb9-4e58-8b20-8d08886bd004","uri":"https://*.gesundheitsverbund.at","name":"*.gesundheitsverbund.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5253bb4b-28ea-4542-9068-a704411fc908","sortOrder":4},"sortOrder":4,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a29f7d82-ccb9-4e58-8b20-8d08886bd004"}],"recentChangeFlags":null},{"id":"2f47ba3d-719e-46cd-9981-d6e94d5634fa","uri":"https://*.wienkav.at","name":"*.wienkav.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f2f85e8c-c6c3-48fd-a008-be10dbe30898","sortOrder":5},"sortOrder":5,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2f47ba3d-719e-46cd-9981-d6e94d5634fa"}],"recentChangeFlags":null},{"id":"fc73a9b2-35ce-414a-a853-bad84bb1955a","uri":"https://www.akhwien.at","name":"www.akhwien.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f572de5a-2023-4da4-8ae9-7dd823b55bcf","sortOrder":6},"sortOrder":6,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fc73a9b2-35ce-414a-a853-bad84bb1955a"}],"recentChangeFlags":null},{"id":"d1026d31-8ed1-4e57-9e58-a0f789ba8ea5","uri":"https://*.akhwien.at","name":"*.akhwien.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c9088bea-c369-4529-a03b-abeff9a5fc61","sortOrder":7},"sortOrder":7,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d1026d31-8ed1-4e57-9e58-a0f789ba8ea5"}],"recentChangeFlags":null},{"id":"a57462fe-3bb4-4f36-8efe-6fbbfcd1b730","uri":"https://stp.wien.gv.at","name":"stp.wien.gv.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9cd20c18-15a3-42bb-b34b-ba0321bedd44","sortOrder":8},"sortOrder":8,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a57462fe-3bb4-4f36-8efe-6fbbfcd1b730"}],"recentChangeFlags":null},{"id":"24948493-ba58-43e6-ba64-7077edbd54b0","uri":"https://wien.at","name":"wien.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3cf22183-8e70-4a3a-b5d6-4e7f7d74289a","sortOrder":9},"sortOrder":9,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"24948493-ba58-43e6-ba64-7077edbd54b0"}],"recentChangeFlags":null},{"id":"fd4f5e38-694c-4c40-b914-ae30726fcb55","uri":"https://*.wien.at","name":"*.wien.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9b0e86ae-01b1-4025-8291-b1869635d24b","sortOrder":10},"sortOrder":10,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fd4f5e38-694c-4c40-b914-ae30726fcb55"}],"recentChangeFlags":null},{"id":"ae77fe4d-c62a-4d0e-bcf4-092a94ab070c","uri":"https://secumails.gesundheitsverbund.at","name":"FTAPI Gesundheitsverbund","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8d801172-19fd-453f-be7c-5d4b401aac33","sortOrder":11},"sortOrder":11,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ae77fe4d-c62a-4d0e-bcf4-092a94ab070c"}],"recentChangeFlags":null},{"id":"d95fcec7-ab70-40aa-a7ca-7c3de179be28","uri":"https://mein.wien.gv.at/","name":"Mein Wien","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bf9b51b4-dda8-4e89-b7da-a46ced549b19","sortOrder":12},"sortOrder":12,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d95fcec7-ab70-40aa-a7ca-7c3de179be28"}],"recentChangeFlags":null},{"id":"4354aeb7-9b0b-4342-86e5-48a36fb45606","uri":"https://mein.wien.gv.at/broker/api/*","name":"Mein Wien API","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d0b14d84-38de-4788-9b74-aaadef98fa34","sortOrder":13},"sortOrder":13,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"4354aeb7-9b0b-4342-86e5-48a36fb45606"}],"recentChangeFlags":null},{"id":"da635222-24ac-41ae-90ad-9ba209b995df","uri":"https://wibi.wien.gv.at/","name":"Wibi","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4f4397cb-1760-4962-82e6-1017ee352fb3","sortOrder":14},"sortOrder":14,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"da635222-24ac-41ae-90ad-9ba209b995df"}],"recentChangeFlags":null},{"id":"0977c042-86ec-47f9-bebd-f8016fe76163","uri":"https://*.stadtwien.onmicrosoft.com","name":"stadtwien.onmicrosoft.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8caa5f21-e55d-42a9-af13-000721f3624a","sortOrder":15},"sortOrder":15,"tags":[{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"0977c042-86ec-47f9-bebd-f8016fe76163"}],"recentChangeFlags":null},{"id":"13c41507-e134-4c14-a29d-5449fe45e6a0","uri":"https://schulenwien.onmicrosoft.com","name":"schulenwien.onmicrosoft.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"030495d3-a196-48cc-a5c2-916d23f4f026","sortOrder":16},"sortOrder":16,"tags":[{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"13c41507-e134-4c14-a29d-5449fe45e6a0"}],"recentChangeFlags":null},{"id":"87dff143-7558-4828-8b94-2d42c580af32","uri":"https://stadtwien-my.sharepoint.com/","name":"Sharepoint Online","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d77645cc-fa18-4d2a-914b-c0cb8e33eb58","sortOrder":17},"sortOrder":17,"tags":[{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"87dff143-7558-4828-8b94-2d42c580af32"}],"recentChangeFlags":null},{"id":"9807f70c-fbe3-4ba8-b02a-4321e6a2e37b","uri":"","name":"AS6720 1/2","category":"other","ipAddress":"141.203.0.0/16","description":null,"engagementBriefTargetGroupTarget":{"id":"e6877c49-8f14-45f1-8546-0b4a85375731","sortOrder":18},"sortOrder":18,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"9807f70c-fbe3-4ba8-b02a-4321e6a2e37b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9807f70c-fbe3-4ba8-b02a-4321e6a2e37b"}],"recentChangeFlags":null},{"id":"b7fc051a-41ed-4ea6-ac36-da0865e5c7e6","uri":"","name":"AS6720 2/2","category":"other","ipAddress":"217.149.224.0/20","description":null,"engagementBriefTargetGroupTarget":{"id":"0514c999-559f-4253-91f5-ac4c8753cd9b","sortOrder":19},"sortOrder":19,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"b7fc051a-41ed-4ea6-ac36-da0865e5c7e6"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b7fc051a-41ed-4ea6-ac36-da0865e5c7e6"}],"recentChangeFlags":null},{"id":"20eadd91-ffa4-4db4-8cf9-d8036171dc5c","uri":"","name":"AS6720 IPv6 1/2","category":"other","ipAddress":"2a00:1ba0:2::/48","description":null,"engagementBriefTargetGroupTarget":{"id":"f28009f3-4b0f-43cc-88cb-35729931ef8b","sortOrder":20},"sortOrder":20,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"20eadd91-ffa4-4db4-8cf9-d8036171dc5c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"20eadd91-ffa4-4db4-8cf9-d8036171dc5c"}],"recentChangeFlags":null},{"id":"d01d0e93-6efc-419a-8541-c89c6068021d","uri":"","name":"AS6720 IPv6 2/2","category":"other","ipAddress":"2a00:1ba0:3::/48","description":null,"engagementBriefTargetGroupTarget":{"id":"6aff962e-a3cb-4ebd-98c4-824fcea4a417","sortOrder":21},"sortOrder":21,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"d01d0e93-6efc-419a-8541-c89c6068021d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d01d0e93-6efc-419a-8541-c89c6068021d"}],"recentChangeFlags":null},{"id":"f3fc577b-7b7b-469c-ae02-fc4ee21209c8","uri":"","name":"AS16314","category":"other","ipAddress":"217.116.64.0/20","description":null,"engagementBriefTargetGroupTarget":{"id":"1f1e6b04-b0a7-4b6a-bf83-ba43d1b7a174","sortOrder":22},"sortOrder":22,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"f3fc577b-7b7b-469c-ae02-fc4ee21209c8"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f3fc577b-7b7b-469c-ae02-fc4ee21209c8"}],"recentChangeFlags":null},{"id":"6ea2a5c3-b403-43e0-b3d2-e7c23b7d0890","uri":"https://play.google.com/store/apps/developer?id=Stadt+Wien\u0026hl=de_AT","name":"City of Vienna Google Play Apps","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6b5332e9-6c3b-4a92-8cc5-389f4be3d865","sortOrder":23},"sortOrder":23,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"6ea2a5c3-b403-43e0-b3d2-e7c23b7d0890"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"6ea2a5c3-b403-43e0-b3d2-e7c23b7d0890"}],"recentChangeFlags":null},{"id":"0b4b553e-9b5c-4695-ae23-706769202880","uri":"https://apps.apple.com/at/developer/stadt-wien/id858505368","name":"City of Vienna iOS Apps","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"138407f7-b763-47bc-b6e6-386c7a62c9cf","sortOrder":24},"sortOrder":24,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"0b4b553e-9b5c-4695-ae23-706769202880"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"0b4b553e-9b5c-4695-ae23-706769202880"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"0bb9019f-cbb4-44bf-8c01-edb5632ca6fd","p1MaxCents":350000,"p1MinCents":240000,"p2MaxCents":240000,"p2MinCents":75000,"p3MaxCents":75000,"p3MinCents":20000,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":2400,"max":3500},"2":{"min":750,"max":2400},"3":{"min":200,"max":750},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"9fdc67c3-60e7-4113-aa6f-8a4529d1863b","name":"Out of scope","targets":[{"id":"5e044951-a55a-469d-b542-a1389d8f0329","uri":"","name":"https://www.wien.gv.at/advuew/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2745a659-7d5a-45a6-9853-0f87801f4391","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"cf9c2d98-f621-4d42-bec0-2453dae63b65","uri":null,"name":"https://*/geoserverneuogd/* (Multiple Domains)","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b47943bf-6833-446f-9f1f-aaa1a42bb312","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"c29c4954-9da9-4a1a-bea9-d16bc0cab252","uri":"","name":"https://*/agssoe/* (Multiple Domains)","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"03cd1197-db63-4b86-8254-3884b259033d","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"50627d1f-36bd-4aec-99e4-beb1f6dade0b","uri":"https://www.geschichtewiki.wien.gv.at","name":"geschichtewiki.wien.gv.at","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"32314a54-5464-4832-9d46-b124661f8fa6","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"7dcc0b04-6d93-4e83-b49b-81f51551c0c8","uri":"","name":"https://bi.bildung-wien.gv.at/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bc691706-b17f-4acf-8587-7659c68ccf9a","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":["entirely_new"]},{"id":"cb8a70f6-d51a-435c-a9c4-97dd1c67e593","uri":"","name":"https://www.wien.gv.at/umfrage/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a4ca76a3-1ef9-4b24-81d3-4931ca7e53e7","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"574ad219-61f2-4d05-bcd9-0d283fcff7f4","uri":"","name":"Public Network / Veranstaltungsnetz","category":"other","ipAddress":"141.203.188.0/22","description":null,"engagementBriefTargetGroupTarget":{"id":"624ff9f6-726e-4389-94eb-c94ed01463c6","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThe following domains and URLs are considered out of scope even if they are included in the broader in scope definitions\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"e28af53c-8b7d-40bc-a0b9-a220678b40f3","code":"city-of-vienna-mbb-og","state":"in_progress","endsAt":null,"bountyId":"f90e9d95-7292-4a18-8a45-6cfc8a2214ae","startsAt":"2025-01-16T19:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Government","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/f9b8/07d5/d7f3699c/9d79b3b601c4a2cc0e1dfb30d5991f33_city_of_vienna_logo.jpeg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-01-16T19:00:00.040Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/city-of-vienna-mbb-og","changelogs":"/engagements/city-of-vienna-mbb-og/changelog","submissions":null,"announcements":"/engagements/city-of-vienna-mbb-og/announcements","hallOfFame":"/engagements/city-of-vienna-mbb-og/hall_of_fames","crowdstream":"/engagements/city-of-vienna-mbb-og/crowdstream"},"announcementsCount":1,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/city-of-vienna-mbb-og/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":"updated","userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=city-of-vienna-mbb-og\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/city-of-vienna-mbb-og/engagement_subscribers","engagementChangelogsUrl":"/engagements/city-of-vienna-mbb-og/changelog","publishedAt":"2026-09-29T12:27:55.437Z","engagementChangelogUrl":"/engagements/city-of-vienna-mbb-og/changelog/68e42953-6e69-443a-b56f-7f1f33a636ed","createUserFeedbacksUrl":"/engagements/city-of-vienna-mbb-og/feedbacks","engagementCrowdstreamUrl":"/engagements/city-of-vienna-mbb-og/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}