{"id":"4e9b49f1-c360-400d-9767-430168605f8b","engagementId":"24cb3ee1-ce29-4dcb-890c-b83e08714d42","data":{"brief":{"id":"3962ebea-d3ff-41da-b935-244b3e451125","name":"DICK'S Sporting Goods","tagline":"DICK'S Sporting Goods Vulnerability Disclosure Program ","description":"\u003cp\u003eDICK'S Sporting Goods recognizes the importance of security, privacy and community, and values the input of hackers acting in good-faith to help us maintain a high standard for our users. This includes encouraging responsible vulnerability research and the disclosure of security vulnerabilities.\u003c/p\u003e\n\n\u003cp\u003eOur vulnerability disclosure policy describes our expectations throughout this process, the channels we’ve created for hackers to communicate with us, and what you can expect from us in return. Thank you for your interest in making the Internet safer.  Good luck and happy hunting! \u003c/p\u003e\n\n\u003ch2\u003eRatings\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"9ed1ce49-a148-438f-92d3-0b8d70b6a8ae","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of DICK's Sporting Goods not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you believe you've identified a vulnerability on a system outside the scope, please reach out to \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e before submitting.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess/Credentials\u003c/h2\u003e\n\n\u003cp\u003eResearchers are encouraged to sign up for any accounts they're able to self provision on the in-scope targets. Please only sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://docs.bugcrowd.com/researchers/participating-in-program/your-bugcrowdninja-email-address/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eApplication logic issues\u003c/li\u003e\n\u003cli\u003eRemote Code Execution\u003c/li\u003e\n\u003cli\u003eSignificant Authentication Bypass (Unauthenticated to authenticated sensitive actions)\u003c/li\u003e\n\u003cli\u003eCross Site Request Forgery on Critical Actions\u003c/li\u003e\n\u003cli\u003eCross Site Scripting (excluding self-XSS)\u003c/li\u003e\n\u003cli\u003eSQL Injection\u003c/li\u003e\n\u003cli\u003eDirectory Traversal\u003c/li\u003e\n\u003cli\u003eInformation Disclosure\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eDenial of Service attacks\u003c/li\u003e\n\u003cli\u003eMissing Headers (i.e, secure, Httponly, OPTIONS/TRACE, etc) unless chained together to produce an exploit\u003c/li\u003e\n\u003cli\u003eMail configuration issues including SPF, DKIM, DMARC settings\u003c/li\u003e\n\u003cli\u003eSSL/TLS best practices\u003c/li\u003e\n\u003cli\u003eLack of email address verification during account registration\u003c/li\u003e\n\u003cli\u003eMixed content issues\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003e3rd Party Services\u003c/h2\u003e\n\n\u003cp\u003eIf you believe an issue with one of our third-party service providers is the result of DICK’s misconfiguration or insecure usage of that service (or you've reported an issue affecting many customers of the service that you believe DICK's can temporarily mitigate without stopping usage of the service while a fix is implemented upstream), we'd appreciate your report regarding the issue.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"3fd3108c-f5ab-4cd4-80ff-0525e187a347","name":"In Scope Targets","targets":[{"id":"75e5822d-d3c2-43b4-8d45-ba0473f572b4","uri":"https://www.dickssportinggoods.com/","name":"*.dickssportinggoods.com","category":"website","ipAddress":null,"description":"Website","engagementBriefTargetGroupTarget":{"id":"1f1c4113-ff68-4901-af45-0538cc84571b","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"75e5822d-d3c2-43b4-8d45-ba0473f572b4"}],"recentChangeFlags":null},{"id":"33e66791-57f0-4060-91ef-6eebe46cd07b","uri":"https://www.golfgalaxy.com/","name":"*.golfgalaxy.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b7108e47-60ab-46ea-b784-0f599ac781c4","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"33e66791-57f0-4060-91ef-6eebe46cd07b"}],"recentChangeFlags":null},{"id":"6b45e690-8425-41dc-bcb3-63b2fe66fbc7","uri":"https://www.goinggoinggone.com/","name":"*.goinggoinggone.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"000c1bd4-5a0b-41b9-9db3-3bc2da420e42","sortOrder":2},"sortOrder":2,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"6b45e690-8425-41dc-bcb3-63b2fe66fbc7"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"6b45e690-8425-41dc-bcb3-63b2fe66fbc7"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"6b45e690-8425-41dc-bcb3-63b2fe66fbc7"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"6b45e690-8425-41dc-bcb3-63b2fe66fbc7"}],"recentChangeFlags":null},{"id":"ffd6e49e-f01d-407a-bf40-f4ce77abcd71","uri":"https://www.publiclands.com/","name":"*.publiclands.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9d6d39e7-c95f-4678-86b9-c4b6ccadde94","sortOrder":3},"sortOrder":3,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ffd6e49e-f01d-407a-bf40-f4ce77abcd71"}],"recentChangeFlags":null},{"id":"dbd845c8-fc17-42af-b9c2-9a6744a71888","uri":"https://www.vrst.com","name":"*.vrst.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6f145146-d8a0-4b84-87c7-bc60ea261bce","sortOrder":4},"sortOrder":4,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"dbd845c8-fc17-42af-b9c2-9a6744a71888"}],"recentChangeFlags":null},{"id":"146a0fd4-f694-416f-a9c7-1ecebeff2b66","uri":"","name":"*.dcsg.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e3cd40e4-54be-4263-be76-bf04f48b7974","sortOrder":5},"sortOrder":5,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"146a0fd4-f694-416f-a9c7-1ecebeff2b66"}],"recentChangeFlags":null},{"id":"ffc5d936-9485-489d-9b69-5d247942172f","uri":"https://www.calia.com","name":"*.calia.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"83eeafec-c3ae-4f7a-860d-f913231cb4ca","sortOrder":7},"sortOrder":7,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ffc5d936-9485-489d-9b69-5d247942172f"}],"recentChangeFlags":null},{"id":"53aa9fad-b05b-4bff-af4b-d988f17b50ff","uri":"https://gc.com/","name":"*.gc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c9064d30-40f1-4ae5-bfba-280b72800156","sortOrder":8},"sortOrder":8,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"53aa9fad-b05b-4bff-af4b-d988f17b50ff"}],"recentChangeFlags":null},{"id":"120f5cf7-8f9f-47be-a0c9-35e494f795a1","uri":"https://apps.apple.com/us/app/dicks-sporting-goods-fitness/id556653197","name":"iOS App:  Dicks Sporting Goods","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4d014359-c832-46b5-94bf-91fdaeb48bc0","sortOrder":9},"sortOrder":9,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"120f5cf7-8f9f-47be-a0c9-35e494f795a1"}],"recentChangeFlags":null},{"id":"433e1c05-19f5-444e-bb41-e87496ae0b2f","uri":"https://apps.apple.com/us/app/golf-galaxy/id1100245173","name":"iOS App: Golf Galaxy","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ad54ce96-4172-4980-b52c-fcff505d57ea","sortOrder":10},"sortOrder":10,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"433e1c05-19f5-444e-bb41-e87496ae0b2f"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"433e1c05-19f5-444e-bb41-e87496ae0b2f"}],"recentChangeFlags":null},{"id":"a9ad9585-21ba-48ab-ab3c-12ec61677464","uri":"https://apps.apple.com/us/app/gamechanger/id1308415878","name":"iOS App: GameChanger","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"64b723f1-9136-4b6e-8db4-cf93319c66e8","sortOrder":11},"sortOrder":11,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"a9ad9585-21ba-48ab-ab3c-12ec61677464"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"a9ad9585-21ba-48ab-ab3c-12ec61677464"}],"recentChangeFlags":null},{"id":"17571a32-c8f6-44c7-aace-90e68e0b5d6a","uri":"https://play.google.com/store/apps/details?id=dsgui.android\u0026hl=en_US","name":"Android App:  Dicks Sporting Goods","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e34e888b-2442-4a10-989d-8b7db3d19aeb","sortOrder":12},"sortOrder":12,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"17571a32-c8f6-44c7-aace-90e68e0b5d6a"}],"recentChangeFlags":null},{"id":"70e44ebc-ca12-487a-933d-40e924bd1ed8","uri":"https://play.google.com/store/apps/details?id=com.dcsg.golfgalaxy\u0026hl=en_US\u0026gl=US","name":"Android App: Golf Galaxy","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"39dac1e6-ca22-4829-bf20-a28e78e1f07d","sortOrder":13},"sortOrder":13,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"70e44ebc-ca12-487a-933d-40e924bd1ed8"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"70e44ebc-ca12-487a-933d-40e924bd1ed8"}],"recentChangeFlags":null},{"id":"28d9374f-8660-4d91-a835-4d71309e0505","uri":"https://play.google.com/store/apps/details?id=com.gc.teammanager\u0026hl=en_US\u0026pli=1","name":"Android App: GameChanger","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"21656ab0-b1e0-4e0e-8e55-e59436dd8651","sortOrder":14},"sortOrder":14,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"28d9374f-8660-4d91-a835-4d71309e0505"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"28d9374f-8660-4d91-a835-4d71309e0505"}],"recentChangeFlags":null},{"id":"935b04cf-fee9-4530-8487-66a72b7938ac","uri":"https://footlocker.com","name":"*.footlocker.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c49f49e4-9bf0-4c64-b98d-22eb986628a2","sortOrder":14},"sortOrder":14,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"935b04cf-fee9-4530-8487-66a72b7938ac"}],"recentChangeFlags":null},{"id":"b85adbf7-62b8-40d5-960c-519052d273d1","uri":"https://apps.apple.com/us/app/foot-locker-shop-releases/id934030757","name":"iOS App: Foot Locker","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e6f0da66-f962-422e-ba56-c4885f7f246f","sortOrder":15},"sortOrder":15,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"b85adbf7-62b8-40d5-960c-519052d273d1"}],"recentChangeFlags":null},{"id":"9732d511-0f7f-428b-a0c3-7ec3040e18be","uri":"https://play.google.com/store/apps/details?id=com.footlocker.approved\u0026hl=en_US\u0026pli=1","name":"Android App: Foot Locker","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a5c5b954-473d-471c-85ad-40951edf842d","sortOrder":16},"sortOrder":16,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"9732d511-0f7f-428b-a0c3-7ec3040e18be"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003ch2\u003eTargets:\u003c/h2\u003e\n\n\u003cp\u003eNOTE:  \u003cstrong\u003eAny identical issues found between the below domains will be treated as a duplicate.\u003c/strong\u003e  We would very much appreciate explicit callout if something is found on more than one of the domains. Thank you.\u003c/p\u003e\n\n\u003ch2\u003eUpdated scope\u003c/h2\u003e\n\n\u003cp\u003eThe following list of IP CIDR ranges are owned by Dick\u0026#39;s Sporting Goods or are part of a shared/cloud IP address space.\u003cbr\u003e\nONLY test against systems in the in-scope domains for this program IF their IP address is in one of the ranges below.\u003c/p\u003e\n\n\u003cp\u003eAny IP address owned by Microsoft, Google, Amazon or Akamai is in scope.\u003c/p\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eADDRESS RANGE\u003c/th\u003e\n\u003cth\u003eCIDR MASK\u003c/th\u003e\n\u003cth\u003eCIDR IP Range\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e4.7.200.160\u003c/td\u003e\n\u003ctd\u003e/27\u003c/td\u003e\n\u003ctd\u003e4.7.200.160 - 4.7.200.191\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e8.42.209.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e8.42.209.0 - 8.42.209.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e63.161.110.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e63.161.110.0 - 63.161.110.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e71.16.39.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e71.16.39.0 - 71.16.39.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e199.30.192.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e199.30.192.0 - 199.30.192.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e199.30.193.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e199.30.193.0 - 199.30.193.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e216.1.155.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e216.1.155.0 - 216.1.155.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e63.170.51.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e63.170.51.0 - 63.170.51.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e144.223.42.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e144.223.42.0 - 144.223.42.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e199.30.194.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e199.30.194.0 - 199.30.194.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e199.30.195.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e199.30.195.0 - 199.30.195.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e208.26.17.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e208.26.17.0 - 208.26.17.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e209.160.154.0\u003c/td\u003e\n\u003ctd\u003e/27\u003c/td\u003e\n\u003ctd\u003e209.160.154.0 - 209.160.154.31\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e209.252.234.0\u003c/td\u003e\n\u003ctd\u003e/24\u003c/td\u003e\n\u003ctd\u003e209.252.234.0 - 209.252.234.255\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"24cb3ee1-ce29-4dcb-890c-b83e08714d42","code":"dickssportinggoods","state":"in_progress","endsAt":null,"bountyId":"480ec350-36a6-4827-828c-1bff7d24125e","startsAt":"2020-08-13T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Retail","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/2509/6615/013bc872/8e4042a820762de78a5f961f75f994bc_dicks.png","logoBackgroundColor":"#FFFFFF","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2020-08-13T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/dickssportinggoods","changelogs":"/engagements/dickssportinggoods/changelog","submissions":null,"announcements":"/engagements/dickssportinggoods/announcements","hallOfFame":"/engagements/dickssportinggoods/hall_of_fames","crowdstream":"/engagements/dickssportinggoods/crowdstream"},"announcementsCount":14,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/dickssportinggoods/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=dickssportinggoods\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/dickssportinggoods/engagement_subscribers","engagementChangelogsUrl":"/engagements/dickssportinggoods/changelog","publishedAt":"2026-04-13T23:06:43.414Z","engagementChangelogUrl":"/engagements/dickssportinggoods/changelog/4e9b49f1-c360-400d-9767-430168605f8b","createUserFeedbacksUrl":"/engagements/dickssportinggoods/feedbacks","engagementCrowdstreamUrl":"/engagements/dickssportinggoods/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}