{"id":"29204ba3-1a5d-40a8-ad4d-dc52c83d9d04","engagementId":"521ab78f-fea2-459e-8c18-0be3e6221d6b","data":{"brief":{"id":"2d3feac6-85d6-4270-8ecc-f477f89b1c90","name":"K15t","tagline":"Apps to Amplify the Atlassian Experience for Everybody","description":"\u003cp\u003eFounded in 2009, K15t GmbH specializes in app development and services for the Atlassian products. With its Scroll apps for Confluence, it is the leading provider of extensions for collaborative content management on the Confluence platform. Backbone Issue Sync extends this collaborative approach to Jira by synchronizing Jira issues across projects and instances for seamless inter-team collaboration.\u003c/p\u003e\n\n\u003ch2\u003eGet Started\u003c/h2\u003e\n\n\u003ch3\u003e(tl;dr version)\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eDo not access data of, modify, destroy or otherwise negatively impact Atlassian and K15t customers, or customer data in any way.\u003c/li\u003e\n\u003cli\u003ePlease pay attention if the app you are testing is in scope for Cloud or Data Center.\u003c/li\u003e\n\u003cli\u003eEnsure you understand the targets, scopes, exclusions, and rules below - no public disclosure without prior consent.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease No Load testing (DoS/DDoS etc) on the instance. This includes application DoS as well as network DoS.\u003c/strong\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003e\u003cem\u003ePlease ensure you're being non-destructive whilst testing and are only testing using accounts and instances created via the instructions under \"Creating your instance\". Any testing/spamming live support portals or Marketplace sites will disqualify you and you will be banned from Atlassian programs.\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\n\u003ch3\u003eHow to setup your test environment\u003c/h3\u003e\n\n\u003ch4\u003eHow to set up Cloud instances\u003c/h4\u003e\n\n\u003col\u003e\n\u003cli\u003e Create an Atlassian Confluence, Jira or Jira Service Desk Cloud instance \u003ca href=\"https://www.atlassian.com/ondemand/signup/form?product=confluence.ondemand,jira-software.ondemand,jira-servicedesk.ondemand\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e using your \u003ccode\u003e@bugcrowdninja.com\u003c/code\u003e email address.\u003c/li\u003e\n\u003cli\u003e Install the live version of the in-scope apps from the Atlassian marketplace\u003c/li\u003e\n\u003cli\u003e Get a free trial license, make sure to unsubscribe before the billing cycle starts (after 30 days). Alternatively, you can pay for the Atlassian Cloud instance and App you test, there is currently no way for Cloud vendors to supply you with a promotion code or free Cloud license.\u003c/li\u003e\n\u003cli\u003e Start from 1. after 30 days\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003ch4\u003eHow to set up Data Center instances\u003c/h4\u003e\n\n\u003col\u003e\n\u003cli\u003e Navigate to \u003ca href=\"https://www.atlassian.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ewww.atlassian.com\u003c/a\u003e and download the Data Center version of the product you want to test\u003c/li\u003e\n\u003cli\u003e Install it and generate a trial license for the product\u003c/li\u003e\n\u003cli\u003e \u003ca href=\"https://confluence.atlassian.com/upm/installing-marketplace-apps-273875715.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eInstall the latest version\u003c/a\u003e of the in-scope apps from the Atlassian marketplace and use a \u003ca href=\"https://developer.atlassian.com/platform/marketplace/timebomb-licenses-for-testing-server-apps/?utm_source=%2Fmarket%2Fadd-on-licensing-for-developers%2Ftimebomb-licenses-for-testing\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003etimebomb license\u003c/a\u003e or start a trial license for each app\u003c/li\u003e\n\u003cli\u003e Start testing\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTarget Apps in Scope\u003c/h2\u003e\n\n\u003ch3\u003eApps in Scope for Cloud\u003c/h3\u003e\n\n\u003ch4\u003eBackbone Issue Sync for Jira\u003c/h4\u003e\n\n\u003cp\u003eYou must first setup a Jira Cloud instance and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBackbone Issue Sync\u003c/a\u003e from the Atlassian marketplace. Start testing by creating synchronizations between projects and across Jira Cloud instances. To test Backbone Issue Sync with cross-instance synchronization to the full extent you will need two Jira Cloud or Jira Service Desk Cloud instances.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/backbone-issue-sync/latest/cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Backbone Issue Sync\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Exporter apps for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence cloud instance and then install \u003ca href=\"https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll PDF Exporter\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Word Exporter\u003c/a\u003e, or \u003ca href=\"https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll HTML Exporter\u003c/a\u003e along with the \u003ca href=\"https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Exporter Extensions\u003c/a\u003e app from the Atlassian marketplace. Start testing by exporting Confluence pages using our \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/cloud/basics-114109238.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePDF\u003c/a\u003e, \u003ca href=\"https://help.k15t.com/scroll-word-exporter/latest/cloud/basics-147032421.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eWord\u003c/a\u003e, and \u003ca href=\"https://help.k15t.com/scroll-html-exporter/latest/cloud/basics-197769107.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHTML\u003c/a\u003e exporters. Create custom export templates for \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/cloud/design-custom-templates-165944374.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePDF\u003c/a\u003e, \u003ca href=\"https://help.k15t.com/scroll-word-exporter/latest/cloud/create-and-manage-space-templates-147032852.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eWord\u003c/a\u003e, and \u003ca href=\"https://help.k15t.com/scroll-html-exporter/latest/cloud/basics-197769107.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHTML\u003c/a\u003e exports and \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/cloud/scroll-macros-160662672.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eadd macros and features\u003c/a\u003e from the Scroll Exporter Extensions app to your Confluence pages.\u003cbr\u003e\nPlease see our documentation about the \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePDF\u003c/a\u003e, \u003ca href=\"https://help.k15t.com/scroll-word-exporter/latest/cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eWord\u003c/a\u003e, or \u003ca href=\"https://help.k15t.com/scroll-html-exporter/latest/cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHTML\u003c/a\u003e exporters as well as the \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/cloud/scroll-macros-160662672.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eexporter extensions\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Documents for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Cloud instance and install \u003ca href=\"https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Documents for Confluence\u003c/a\u003e from the Atlassian Marketplace. Start testing by creating a new document. Copy the document, create versions of it, apply restrictions to it, compare versions or copies, and create read requests.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-docs/latest/cloud/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll Documents\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eVariants for Scroll Documents\u003c/h4\u003e\n\n\u003cp\u003eThis is an extension to Scroll Documents for Confluence. Please first install that app and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVariants for Scroll Documents\u003c/a\u003e from the Atlassian Marketplace.\u003cbr\u003e\nPlease see the variants-specific section of our \u003ca href=\"https://help-cloud.k15t.com/scroll-documents/Manage-Variants.14058487809.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eTranslations for Scroll Documents\u003c/h4\u003e\n\n\u003cp\u003eThis is an extension to Scroll Documents for Confluence. Please first install that app and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eTranslations for Scroll Documents\u003c/a\u003e from the Atlassian Marketplace.\u003cbr\u003e\nPlease see the translations-specific section of our \u003ca href=\"https://help-cloud.k15t.com/scroll-documents/Manage-Translations.14106361908.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Imagemap for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Cloud instance and install \u003ca href=\"https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll ImageMap for Confluence\u003c/a\u003e from the Atlassian Marketplace. Start testing by adding a new ImageMap macro. Upload an image. Add clickable link areas to other pages in Confluence or external URLs. Use different link area shapes, edit links and tooltips.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-imagemap/2.3/cloud/scroll-imagemap-114102020.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll ImageMap\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Viewport for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Cloud instance and install \u003ca href=\"https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Viewport for Confluence\u003c/a\u003e from the Atlassian Marketplace. Start by creating a site, configuring the theme and previewing and publishing sites - creating, configuring and publishing a site is only available to Confluence administrators and members of the scroll-viewport-admins group.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-viewport/latest/cloud/scroll-viewport-125708693.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll Viewport\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Content Quality for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Cloud instance and install \u003ca href=\"https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Content Quality for Confluence\u003c/a\u003e from the Atlassian Marketplace.\u003cbr\u003e\nStart testing by enabling it in a space and then check some pages. See our \u003ca href=\"https://help.k15t.com/scroll-content-quality/get-started\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003egetting started docs\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch3\u003eApps in Scope for Data Center\u003c/h3\u003e\n\n\u003ch4\u003eScroll Exporter apps for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Data Center instance and then install \u003ca href=\"https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll PDF Exporter\u003c/a\u003e, \u003ca href=\"https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Word Exporter\u003c/a\u003e, and the \u003ca href=\"https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll HTML Exporter\u003c/a\u003e from the Atlassian marketplace. Start testing by exporting Confluence pages using our exporters. Create custom export templates for \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/server/design-custom-templates-165944374.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePDF\u003c/a\u003e, \u003ca href=\"https://help.k15t.com/scroll-word-exporter/latest/server/create-and-manage-space-templates-147032852.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eWord\u003c/a\u003e, and \u003ca href=\"https://help.k15t.com/scroll-html-exporter/creating-a-template-75367699.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHTML\u003c/a\u003e exports and \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/server/intro-to-macros-182787279.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eadd macros and features\u003c/a\u003e to your Confluence pages.\u003cbr\u003e\nPlease see our documentation about the \u003ca href=\"https://help.k15t.com/scroll-pdf-exporter/latest/server\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePDF\u003c/a\u003e, \u003ca href=\"https://help.k15t.com/scroll-word-exporter/latest/server\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eWord\u003c/a\u003e, and \u003ca href=\"https://help.k15t.com/scroll-html-exporter/scroll-html-exporter-75367686.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHTML\u003c/a\u003e exporters for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Documents for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Data Center instance and install \u003ca href=\"https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Documents for Confluence\u003c/a\u003e from the Atlassian Marketplace. Start testing by creating a new document. Copy the document, create versions of it, apply restrictions to it, compare versions or copies, and create read requests.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-docs/latest/server/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll Documents\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eVariants for Scroll Documents\u003c/h4\u003e\n\n\u003cp\u003eThis is an extension to Scroll Documents for Confluence. Please first install that app and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eVariants for Scroll Documents\u003c/a\u003e from the Atlassian Marketplace.\u003cbr\u003e\nPlease see the variants-specific section of our \u003ca href=\"https://help.k15t.com/scroll-docs/latest/server/manage-variants-193397836.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eTranslations for Scroll Documents\u003c/h4\u003e\n\n\u003cp\u003eThis is an extension to Scroll Documents for Confluence. Please first install that app and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eTranslations for Scroll Documents\u003c/a\u003e from the Atlassian Marketplace.\u003cbr\u003e\nPlease see the translations-specific section of our \u003ca href=\"https://help.k15t.com/scroll-docs/latest/server/manage-translations-197762181.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Imagemap for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Data Center instance and install \u003ca href=\"https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll ImageMap for Confluence\u003c/a\u003e from the Atlassian Marketplace. Start testing by adding a new ImageMap macro. Upload an image. Add clickable link areas to other pages in Confluence or external URLs. Use different link area shapes, edit links and tooltips.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-imagemap/2.3/server\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll ImageMap\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Versions for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Data Center instance and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Versions\u003c/a\u003e from the Atlassian marketplace. Start testing by following our \u003ca href=\"https://help.k15t.com/scroll-versions/latest/get-started-179702365.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eGet Started Guide\u003c/a\u003e.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-versions/latest/scroll-versions-110528202.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll Versions\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Translations for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Data Center instance and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Translations\u003c/a\u003e from the Atlassian marketplace. Start testing by following our \u003ca href=\"https://help.k15t.com/scroll-translations/latest/get-started-179702421.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eGet Started Guide\u003c/a\u003e.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-translations/latest/scroll-translations-121308300.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll Translations\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch4\u003eScroll Viewport for Confluence\u003c/h4\u003e\n\n\u003cp\u003eYou must first set up a Confluence Data Center instance and then install \u003ca href=\"https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter\u0026amp;tab=overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eScroll Viewport\u003c/a\u003e from the Atlassian marketplace. Start testing by creating Confluence spaces and pages and publishing them as Viewports using our app. More advanced configurations can integrate content from Scroll Versions and Scroll Translations (see above) into a Viewport. Note that Confluence and space administrators can add custom Velocity, JS, CSS and HTML to Viewports - this is a feature of the app. Users with only View and Edit permission should not be able to do that - e.g. by including malicious payload into Confluence pages.\u003cbr\u003e\nPlease see our \u003ca href=\"https://help.k15t.com/scroll-viewport/latest/server\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003edocumentation for Scroll Viewport\u003c/a\u003e for more details.\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"02370343-bf13-4661-a7a2-caa1c1076ad1","targetsOverview":"\u003cp\u003eTesting is only authorized on the app targets listed as In-Scope. \u003cstrong\u003eOnly domains of the form *.addons.k15t.com/*, *.k15t.app/*, and *.scrollhelp.site/* are in scope. Any other domain/property of K15t is out of scope.\u003c/strong\u003e Please note that the marketplace.atlassian.com links point to the relevant listings of the apps in scope, but the Atlassian marketplace is not part of this bounty program. If you believe you've identified a vulnerability on a system outside the scope, please reach out to support@bugcrowd.com before submitting.\u003c/p\u003e\n\n\u003cp\u003eEnsure you review the out of scope and exclusions list for further details.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTarget Info:\u003c/h2\u003e\n\n\u003ch3\u003eSpecific Focus Areas for Backbone Issue Sync for Jira\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eUnauthorized Cross Instance / Cross Tenant Data Leakage/Access - As Backbone Issue Sync for Jira can synchronize data across Jira Cloud instances, that data access is expected, but the usage of Backbone must have been authorized by both tenants and only data that is explicitly configured to be synchronized MUST be synchronized.\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eSpecific Focus Area for Scroll Documents\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eDocument content confidentiality: document content, i.e. the page content in the page tree, is not made available or disclosed, in particular through our backend tasks, to unauthorized entities.\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eSpecific Focus Area for Scroll Viewport\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eXSS created through authoring content in Confluence; SSRF during site generation\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eGeneral Focus Areas\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eServer-side Remote Code Execution (RCE)\u003c/li\u003e\n\u003cli\u003eServer-Side Request Forgery (SSRF)\u003c/li\u003e\n\u003cli\u003eStored/Reflected Cross-site Scripting (XSS)\u003c/li\u003e\n\u003cli\u003eCross-site Request Forgery (CSRF)\u003c/li\u003e\n\u003cli\u003eXML External Entity Attacks (XXE)\u003c/li\u003e\n\u003cli\u003eAccess Control Vulnerabilities (Insecure Direct Object Reference issues, etc)\u003c/li\u003e\n\u003cli\u003ePath/Directory Traversal Issues\n​\n\u003cstrong\u003ePlease No Load testing (DoS/DDoS etc) on the instance. This includes application DoS as well as network DoS.\u003c/strong\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eExclusions and Rules\u003c/h2\u003e\n\n\u003ch3\u003eSpecific Exclusions for Scroll Word Exporter\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eFindings about being able to use custom Word templates with embedded scripts for Scroll Word Exporter to create resulting documents that can contain malicious code.\n###Specific Exclusions for Scroll HTML Exporter\u003c/li\u003e\n\u003cli\u003eFindings about security issues in exported HTML files that are caused by modifying the exported files or adding custom Javascript.\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eGeneral Exclusions\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eVulnerabilities found in the Atlassian host application including its API or in the Atlassian Connect API or integration mechanisms will not be eligible for a payout. However, you can submit these vulnerabilities in this public program \u003ca href=\"https://bugcrowd.com/atlassian\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://bugcrowd.com/atlassian\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eBlind XSS must not return any user data that you do not have access to (e.g. Screenshots, cookies that aren't owned by you, etc); when testing for blind XSS, please use the least invasive test possible (e.g. calling 1x1 image or nonexistent page on your web server, etc).\u003c/li\u003e\n\u003cli\u003eNo pivoting or post exploitation attacks (i.e. using a vulnerability to find another vulnerability) are allowed on this program. DO NOT under any circumstance leverage a finding to identify further issues.\u003c/li\u003e\n\u003cli\u003eCustomer cloud instances and data are explicitly out of scope.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eThe following finding types are specifically excluded from the bounty\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe use of Automated scanners is strictly prohibited\u003c/li\u003e\n\u003cli\u003eDescriptive error messages (e.g. Stack Traces, application or server errors).\u003c/li\u003e\n\u003cli\u003eFingerprinting / banner disclosure on common/public services.\u003c/li\u003e\n\u003cli\u003eClickjacking and issues only exploitable through clickjacking.\u003c/li\u003e\n\u003cli\u003eCSRF attacks that require knowledge of the CSRF token (e.g. attacks involving a local machine).\u003c/li\u003e\n\u003cli\u003eLogout Cross-Site Request Forgery (logout CSRF).\u003c/li\u003e\n\u003cli\u003eContent Spoofing.\u003c/li\u003e\n\u003cli\u003ePresence of application or web browser ‘autocomplete’ or ‘save password’ functionality.\u003c/li\u003e\n\u003cli\u003eLack of Secure/HTTPOnly flags on non-sensitive Cookies.\u003c/li\u003e\n\u003cli\u003eLack of Security Speedbump when leaving the site.\u003c/li\u003e\n\u003cli\u003eWeak Captcha / Captcha Bypass.\u003c/li\u003e\n\u003cli\u003eLogin or Forgot Password page brute force and account lockout not enforced.\u003c/li\u003e\n\u003cli\u003eOPTIONS HTTP method enabled.\u003c/li\u003e\n\u003cli\u003eUsername / email enumeration.\u003c/li\u003e\n\u003cli\u003eMissing HTTP security headers, specifically (\u003ca href=\"https://www.owasp.org/index.php/List_of_useful_HTTP_headers\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.owasp.org/index.php/List_of_useful_HTTP_headers\u003c/a\u003e), e.g. Strict-Transport-Security, X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Content-Security-Policy, X-Content-Security-Policy, X-WebKit-CSP, Content-Security-Policy-Report-Only, Cache-Control, and Pragma\u003c/li\u003e\n\u003cli\u003eHTTP/DNS cache poisoning\u003c/li\u003e\n\u003cli\u003eSSL/TLS Issues, e.g.SSL Attacks such as BEAST, BREACH, Renegotiation attack. SSL Forward secrecy not enabled. SSL weak/insecure cipher suites.\u003c/li\u003e\n\u003cli\u003eNo Load testing (DoS/DDoS etc) is allowed on the instance. This includes application DoS as well as network DoS.\u003c/li\u003e\n\u003cli\u003eSelf-XSS reports will not be accepted.\u003c/li\u003e\n\u003cli\u003eSimilarly, any XSS where local access is required (i.e. User-Agent Header injection) will not be accepted. The only exception will be if you can show a working off-path MiTM attack that will allow for the XSS to trigger.\u003c/li\u003e\n\u003cli\u003eVulnerabilities that are limited to unsupported browsers will not be accepted (i.e. \"this exploit only works in IE6/IE7\"). A list of supported browsers can be found \u003ca href=\"https://confluence.atlassian.com/cloud/supported-browsers-744721663.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eKnown vulnerabilities in used libraries, or the reports that a K15t product uses an outdated third-party library (e.g. jQuery, Apache HttpComponents, etc) unless you can prove exploitability.\u003c/li\u003e\n\u003cli\u003eMissing or incorrect SPF records of any kind.\u003c/li\u003e\n\u003cli\u003eMissing or incorrect DMARC records of any kind.\u003c/li\u003e\n\u003cli\u003eSource code disclosure vulnerabilities.\u003c/li\u003e\n\u003cli\u003eInformation disclosure of non-confidential information (e. g. issue id, project id, commit hashes).\u003c/li\u003e\n\u003cli\u003eThe ability to upload/download viruses or malicious files to the platform.\u003c/li\u003e\n\u003cli\u003eEmail bombing/Flooding/rate limiting\n​\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eRules\u003c/h3\u003e\n\n\u003cp\u003eThis bounty follows Bugcrowd's standard disclosure terms, which is non-disclosure. K15t will choose the appropriate form of disclosure according to our \u003ca href=\"https://help.k15t.com/security-bug-fixing-policy-154863350.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eSecurity Bug Fixing Policy\u003c/a\u003e.\u003cbr\u003e\nNote: K15t uses \u003ca href=\"https://www.first.org/cvss/user-guide\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eCVSS\u003c/a\u003e to consistently score security vulnerabilities. Where discrepancies between the VRT and CVSS score exist, K15t will defer to the CVSS score to determine the priority.\u003c/p\u003e\n\n\u003ch4\u003ePublic Disclosure\u003c/h4\u003e\n\n\u003cp\u003eBefore disclosing an issue publicly we require that you first request permission from us. K15t will process requests for public disclosure on a per report basis. Requests to publicly disclose an issue that has not yet been fixed for customers will be rejected. Any researcher found publicly disclosing reported vulnerabilities without K15t's written consent will have any allocated bounty withdrawn and disqualified from the program.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":null,"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"1ecceca4-5a10-4b66-a8b7-13f0d3032132","name":"In Scope Targets","targets":[{"id":"96fcfa88-2b18-4b04-87e6-12231bf8b626","uri":"https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c6649863-a2e3-47cd-91dd-1b052656faa9","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8d7e2286-bc0a-458a-b804-c773c5951538","uri":"https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0a6753e0-a734-4343-b7dd-0190b980d3de","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b8abf8e2-25af-472f-be1b-07e5b8b30088","uri":"https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud","name":"https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"613b1c66-61a6-4efd-80e3-de61b7f9637d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"4e007d5d-6f22-4a39-9d53-77e4730812a5","uri":"https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud","name":"https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"780bf1fe-7cf0-487f-badb-4b52f4345346","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c2c47f92-adee-4f9f-87e0-a9a171957c32","uri":"https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b84ea6ef-b9ac-45ea-bbc5-8973107e2e46","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"28c80ad6-e8b1-49cf-9679-7cda84de3d07","uri":"https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud","name":"https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"970d954d-8d91-4033-8663-6c1df1390c26","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"70a401d4-7388-494d-ab3c-4682ee4d78db","uri":"https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"16ab30c5-bbb3-431e-8d81-26595b9c388a","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"866d6bc8-02e1-4348-a042-353934991ea4","uri":"https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"89c118b5-f322-4bc1-a3b5-50fcd95e2565","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8c8a1e28-1eaf-4fd5-9715-1a4e2e1e6e92","uri":"https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f1f58657-9d52-4919-bba7-88a26c2e5ce3","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"485a8965-8834-4eb3-b4de-4935309df544","uri":"https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5cb38a50-0588-4877-9ed3-15e03d212568","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"03e9d346-b711-4ffa-ac46-39f7227f09c3","uri":"https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"da09dd39-be0f-4395-b661-3d9f57b6cf41","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e2eec6c7-fd44-405a-944c-3a6ad6968f9f","uri":"https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c740e7e7-ea60-44e8-ad68-bbdc1e816ae5","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"cb9afd1c-7dc9-40e0-9193-be292945fe62","uri":"https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f443c4f5-d1c1-46d1-8c29-069ab0073a43","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"77f922bb-9c79-4c1b-9ce0-aec34e6aaefb","uri":"https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter\u0026tab=overview","name":"https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter\u0026tab=overview","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"599b62b1-f835-4156-938b-0d8c9d368ee7","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"bba4982d-0688-4153-a2ea-0b53336df5dd","uri":"https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=datacenter\u0026tab=overview","name":"https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=datacenter\u0026tab=overview","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"afc1d93f-08e6-480b-bdb8-eca95d89195c","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b3c60d80-9135-4602-bcde-28233e66f005","uri":"https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter\u0026tab=overview","name":"https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter\u0026tab=overview","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5a568065-70ef-4576-a7ed-34896884178a","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"1c554276-2868-4410-ba73-556455b7644b","uri":"https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"759f64d0-c335-46b4-82d9-746a97161ae4","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c93438d1-36cf-48b6-8f0e-18f079feb06c","uri":"https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1feb8661-fed1-4489-930e-1c3e5a69f310","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"a7531a94-b54d-4cb6-bf7c-78d7a19b0895","uri":"https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud","name":"https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e599988e-d54b-449b-8b31-6f0249230c15","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"35eb8842-1881-462b-90dc-2e9525645d0d","uri":"https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter","name":"https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0d14f8f0-10dc-4cf0-b718-45fd53ed6511","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b8c17ff9-1747-4678-886c-eca172507001","uri":"https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud\u0026tab=overview","name":"https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud\u0026tab=overview","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1eba4cf9-fbf6-4cab-a630-2264ac978791","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"522bc1da-d824-4ca6-a569-ddd53c0c3064","uri":"https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence","name":"https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence?hosting=cloud","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f202f65a-9e0d-4d13-81d5-325dcad43791","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"c834570f-26c6-44e1-9bba-5edeaba825fa","p1MaxCents":150000,"p1MinCents":150000,"p2MaxCents":90000,"p2MinCents":90000,"p3MaxCents":30000,"p3MinCents":30000,"p4MaxCents":10000,"p4MinCents":10000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1500,"max":1500},"2":{"min":900,"max":900},"3":{"min":300,"max":300},"4":{"min":100,"max":100},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"40b53e12-cc8e-4493-9157-a5b3c5ea1137","name":"Out of scope","targets":[{"id":"5b403eef-0b14-466f-898a-56b1f8044d09","uri":null,"name":"Any other subdomains of k15t.com, including but not limited to www.k15t.com, www.k15t.de and help.k15t.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"195db6f8-614b-4a25-8f81-013fa3176575","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"23b84c8d-01ca-4b86-9999-bfd4ff6d1ae1","uri":null,"name":"https://marketplace.atlassian.com/*","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"943d3381-dc2c-4996-8ccf-e6b9903a3f86","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"521ab78f-fea2-459e-8c18-0be3e6221d6b","code":"k15t","state":"in_progress","endsAt":null,"bountyId":"cae11c1d-b152-4ce9-83cf-89fdb114c2d9","startsAt":"2019-07-11T19:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Computer Software","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/aead/25a6/171b280b/7717b1c609d88e413ffd4382c3fbc045_K15t_Logo_RGB_Signet.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2019-07-11T19:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/k15t","changelogs":"/engagements/k15t/changelog","submissions":null,"announcements":"/engagements/k15t/announcements","hallOfFame":"/engagements/k15t/hall_of_fames","crowdstream":"/engagements/k15t/crowdstream"},"announcementsCount":11,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/k15t/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=k15t\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/k15t/engagement_subscribers","engagementChangelogsUrl":"/engagements/k15t/changelog","publishedAt":"2024-01-12T13:23:43.957Z","engagementChangelogUrl":"/engagements/k15t/changelog/29204ba3-1a5d-40a8-ad4d-dc52c83d9d04","createUserFeedbacksUrl":"/engagements/k15t/feedbacks","engagementCrowdstreamUrl":"/engagements/k15t/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}