{"id":"127d8b50-3067-4aaf-ae19-de737a1017d5","engagementId":"4f96c427-fa57-405c-bb4c-865627dc3350","data":{"brief":{"id":"13a55965-f9b5-477e-85e3-c9790e3c939d","name":"Kohl's","tagline":"Kohl's is committed to securing our customer's data, we value your feedback and will do everything possible to address any security issues you raise.","description":"\u003cp\u003eKohl's is taking the next step in securing our applications. We invite researchers through Bugcrowd's bug bounty program to test our site and let us know how we're doing. Kohl's knows that securing our applications and networks requires collaboration with the security community and will reward those researchers who find in scope vulnerabilities by following our Bug Bounty program and scope.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease read this brief and its stated conditions COMPLETELY before doing any penetration testing.  Failure to comply may result in not being able to collect a reward.\u003c/strong\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRewards/Ratings:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eThis program adheres to the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e for the prioritization and rating of findings, except for the specific vulnerabilities listed below: \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eVRT category\u003c/th\u003e\n\u003cth\u003eSpecific vuln name\u003c/th\u003e\n\u003cth\u003eVariant / Affected function\u003c/th\u003e\n\u003cth\u003eTechnical severity\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eServer Security Misconfiguration\u003c/td\u003e\n\u003ctd\u003eMisconfigured DNS\u003c/td\u003e\n\u003ctd\u003eSubdomain Takeover\u003c/td\u003e\n\u003ctd\u003e4\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eCross-Site Scripting (XSS)\u003c/td\u003e\n\u003ctd\u003eReflected\u003c/td\u003e\n\u003ctd\u003eNon-Self\u003c/td\u003e\n\u003ctd\u003e5\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eSensitive Data Exposure\u003c/td\u003e\n\u003ctd\u003eDisclosure of Secrets\u003c/td\u003e\n\u003ctd\u003eFor Publicly Accessible Asset\u003c/td\u003e\n\u003ctd\u003eVaries\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eBroken Authentication and Session Management\u003c/td\u003e\n\u003ctd\u003eAuthentication Bypass\u003c/td\u003e\n\u003ctd\u003e\u003c/td\u003e\n\u003ctd\u003eVaries\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eServer-Side Injection\u003c/td\u003e\n\u003ctd\u003eContent Spoofing\u003c/td\u003e\n\u003ctd\u003eiframe Injection\u003c/td\u003e\n\u003ctd\u003e4\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\n\u003cul\u003e\n\u003cli\u003eLLE or staging environments are generally\"kudos only,\" unless significant risk can be demonstrated. However, infrastructure related issues will be paid as per the severity. All the findings will be reviewed case-by-case and rewarded accordingly.\u003c/li\u003e\n\u003cli\u003eMultiple vulnerabilities with same root cause will be grouped and awarded one bounty.\u003c/li\u003e\n\u003c/ul\u003e","industryTagId":"9ed1ce49-a148-438f-92d3-0b8d70b6a8ae","targetsOverview":"\u003ch2\u003eAccess:\u003c/h2\u003e\n\n\u003cp\u003eWe encourage you to sign up for any accounts that you can self-provision on the in-scope targets. When creating an account, please use your \u003cstrong\u003e@bugcrowdninja.com\u003c/strong\u003e email address. For additional information about @bugcrowdninja email addresses, refer to the documentation \u003ca href=\"https://docs.bugcrowd.com/researchers/participating-in-program/your-bugcrowdninja-email-address/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003cp\u003eAdditionally, to avoid being blocked, make sure to modify your \u003cstrong\u003euser-agent\u003c/strong\u003e string. All researchers conducting tests should include the User-Agent header in their requests, using the following format: \u003cstrong\u003e\u0026lt;[username]@bugcrowdninja.com\u0026gt;\u003c/strong\u003e.\u003cbr\u003e\n​\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eFocus Areas\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eKohl's Cash, Rewards points, and Loyalty programs. (this should not impact actual customers, including redeeming Kohl’s Cash or Rewards Balance, use your test accounts)\u003c/li\u003e\n\u003cli\u003ePayment workflow.\u003c/li\u003e\n\u003cli\u003eAbuse of functionality leading to fraud. (KohlsPay / Rewards / KohlsCash)\u003c/li\u003e\n\u003cli\u003eAccessing PII, PCI, and other sensitive data. (If found, stop enumerating the data, report the issue, and delete local copies)\u003c/li\u003e\n\u003cli\u003eHorizontal escalation (accessing other users data - Only interact with your own test account)\u003c/li\u003e\n\u003cli\u003eDeserialization vulnerabilities​.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eScanning Activity:\u003c/h3\u003e\n\n\u003cp\u003ePlease do not use automated vulnerability scanners on this program. Custom scripts and fuzzing tools are permitted, but if using them, please keep your traffic to six requests per second or less. Additionally, it’s worth noting that the client already runs automated scans from Acunetix, Zap, Nessus, et al., against the in-scope targets – so using these tools is likely of minimal utility to researchers. As such, please avoid using them unless for targeted, specific testing, and then only at less than six requests per second.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eOut-of-Scope Vulnerabilities\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eAvoid any actions that cause DoS attacks.\u003c/li\u003e\n\u003cli\u003eAvoid any activities that result in spam emails being sent to other Kohl's customers or employees.\u003c/li\u003e\n\u003cli\u003eDo not physically test Kohl's stores by accessing or plugging devices into Kohl's properties.\u003c/li\u003e\n\u003cli\u003eUsername/email/account enumeration, credential stuffing, and brute-forcing passwords are prohibited.\u003c/li\u003e\n\u003cli\u003eSocial engineering is prohibited.\u003c/li\u003e\n\u003cli\u003eDo not upload code that negatively impacts Kohl’s infrastructure or other customers.\u003c/li\u003e\n\u003cli\u003eProof of concepts should be limited to the least impactful actions that demonstrate vulnerabilities. When uncertain, seek guidance.\u003c/li\u003e\n\u003cli\u003eMissing Headers (i.e, secure, Httponly, OPTIONS/TRACE, etc)\u003c/li\u003e\n\u003cli\u003eMail configuration issues (SPF, DKIM, DMARC settings).\u003c/li\u003e\n\u003cli\u003eLack of email address verification during account registration.\u003c/li\u003e\n\u003cli\u003eMixed content issues\u003c/li\u003e\n\u003cli\u003eAddress other best practice issues (e.g., SSL/TLS, DNS, CSP).\u003c/li\u003e\n\u003c/ul\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"0f4787ec-56c8-4bf4-aa1d-a63c63258219","name":"In Scope Targets","targets":[{"id":"7b6251cd-730a-4fe7-be4b-419339413d49","uri":null,"name":"Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below)","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d7cf7331-8df5-4388-899b-44128afaec31","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7b6251cd-730a-4fe7-be4b-419339413d49"}],"recentChangeFlags":null},{"id":"e8ae1c68-9e09-45b2-ac88-adcf3d9e18d9","uri":"https://www.kohls.com","name":"www.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"163646bc-4344-47d4-bf9f-af501e9aea80","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"e8ae1c68-9e09-45b2-ac88-adcf3d9e18d9"},{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"e8ae1c68-9e09-45b2-ac88-adcf3d9e18d9"},{"id":"9f26f47e-4acd-4d8d-aad2-414b6b367eb0","name":"Handlebars","targetId":"e8ae1c68-9e09-45b2-ac88-adcf3d9e18d9"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"e8ae1c68-9e09-45b2-ac88-adcf3d9e18d9"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e8ae1c68-9e09-45b2-ac88-adcf3d9e18d9"}],"recentChangeFlags":null},{"id":"c1969085-0cd9-4f63-9cc6-00a9558bf513","uri":"https://www.kohls.com/feature/app.jsp","name":"Kohl's Mobile Application for iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"dfad2009-0072-450c-8e00-e14a3c5f765c","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"c1969085-0cd9-4f63-9cc6-00a9558bf513"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"c1969085-0cd9-4f63-9cc6-00a9558bf513"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"c1969085-0cd9-4f63-9cc6-00a9558bf513"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"c1969085-0cd9-4f63-9cc6-00a9558bf513"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"c1969085-0cd9-4f63-9cc6-00a9558bf513"}],"recentChangeFlags":null},{"id":"d4354b10-e31b-4fed-9fbe-76dde877dc8f","uri":"https://www.kohls.com/feature/app.jsp","name":"Kohl's Mobile Application for Android","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"24a78879-e0f7-4e15-8b71-5b1c959d9eee","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"d4354b10-e31b-4fed-9fbe-76dde877dc8f"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"d4354b10-e31b-4fed-9fbe-76dde877dc8f"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"d4354b10-e31b-4fed-9fbe-76dde877dc8f"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"d4354b10-e31b-4fed-9fbe-76dde877dc8f"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"e781fbcc-2010-4edd-8091-c14b54fd7dce","p1MaxCents":450000,"p1MinCents":300000,"p2MaxCents":300000,"p2MinCents":200000,"p3MaxCents":150000,"p3MinCents":30000,"p4MaxCents":30000,"p4MinCents":10000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":3000,"max":4500},"2":{"min":2000,"max":3000},"3":{"min":300,"max":1500},"4":{"min":100,"max":300},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"641d85c6-974b-4d1a-a53d-275531417236","name":"Out of Scope Targets","targets":[{"id":"710a13f6-0bfa-44a0-9062-bca81d69b76b","uri":null,"name":"apply.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2d9fc36d-2eef-427b-980c-77929d8ed4b2","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"3ef61f11-e386-4c2a-b033-69959b4f8298","uri":"","name":"*kohls.com/kohlscredit/prequal","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1ba2fb0a-0ba5-4a53-ade8-05161b16b78f","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"eba1385b-f49a-4281-8bd9-95a4d4a51562","uri":"","name":"*kohlsecommerce.com/kohlscredit/prequal","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b924329d-ce39-410f-bfd0-d8c9b8c535ec","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"7315d7c8-7470-4b8e-aa80-06b0996cd3a5","uri":null,"name":"corporate.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"43d655e9-aab2-4fd6-96d8-3675573209f1","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8cd38822-8a06-4d5d-a81c-3073da4283a9","uri":null,"name":"productchampions.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d2bd5827-cb4e-4209-b5d9-2a6c7d042027","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"56757d39-7a11-4717-bca3-3914d52a5ecc","uri":null,"name":"link-preprod.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6c6a65d6-3cc7-4807-9f26-ae6339b4ac72","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e33a02f5-57e7-47dc-8640-57792dc0eb98","uri":null,"name":"developer.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9ae0b684-be2d-466b-b12e-21deb5cb9e4b","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"15eb490e-050e-4c3e-8dd2-dcc1098ab4f0","uri":null,"name":"lclive.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1d726ced-97da-4dea-acd5-e93defcf3075","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"73fcc2a0-57a3-43c6-b23e-a009c3dc094c","uri":null,"name":"author-mykohls.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"679796e0-0d81-4cb8-974f-fe87011ceb49","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"93a6b5b9-9afc-494d-bfb2-96fe5bd1e3e6","uri":null,"name":"mykohls-origin.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0e861f80-0623-4879-9bdc-0ca3deb41040","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e58805fb-3d47-485f-8f9c-b062352449e6","uri":null,"name":"origin-stage65-corporate.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2a35de16-321f-44b0-a51c-48ea1e805968","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"dc91c972-bd0e-445b-9c15-9bb37d401212","uri":null,"name":"origin-stage65-mykohls.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ebd41749-8d95-46e7-8ff9-7ba2086b8f26","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"ef9ac958-8b2d-432c-8aed-a3cf4f805590","uri":null,"name":"author-stage65-mykohls.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a531419c-5771-4928-9439-64286cbade07","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e91d097f-1175-4296-8e17-b529936cd0e6","uri":null,"name":"stage65-corporate.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ccbe1aa6-2039-4009-8b27-b3c6432167ca","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"64c64b37-b9e0-4f15-927c-3de99461ff17","uri":null,"name":"stage65-mykohls.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"21065151-09a7-4e42-b267-23d3319f9c19","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"2098a78f-6960-4922-950a-8c360a6e1cee","uri":null,"name":"author-qa65-mykohls.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f1a22f03-f40c-4d69-a4b5-63ed07ee4b9a","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"23e83741-3a91-4e1c-89fa-484a815f1199","uri":null,"name":"mykohls.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5aa686f9-b806-4ad8-b2ea-3d7cd3d8830b","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8f7a2fc6-e102-4853-b7d9-e4e9f58a63f9","uri":null,"name":"any domain with archaius.json endoint is out of scope","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2872dbce-9d28-41c4-bd43-0bd1e3e69962","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b481aaed-cf48-4d17-b5dd-06a7de530834","uri":"","name":"*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9832882a-7e4b-41c2-b38a-35a3f6f10fb7","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"5911ba6a-52c4-4a9f-b8bf-69b27cdb4485","uri":"","name":"*kohls.com/checkout/prequal_inquiry.jsp#/preQualEligible","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"40d218ce-2312-43f7-9c99-42d9a227fa7c","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b99bc94e-9b1a-474a-80bc-722e4bf2b307","uri":"","name":"*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"51a30182-3bc8-4b00-a0ef-b98747db8e15","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"82319bad-71ab-48d4-a420-626620053e26","uri":"","name":"*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligible","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"863b6959-3675-4779-a0f8-4be3396e3c29","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b234df94-060f-40a1-9105-701a233b5a08","uri":null,"name":"vp-*.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"39f6b276-fe3d-472a-8be9-e55903dc9501","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"7a5a0f69-7f2d-4670-a67e-04a12b03cae4","uri":null,"name":"*qa*.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f30cdf22-d9aa-4739-a3ff-65d2787ea019","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"cee7c2e5-dbc9-4fae-bebb-4836f2a67ae5","uri":null,"name":"wfh*.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6bf6f18a-d7d2-4558-9c33-7989d9643ad2","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"704089dc-b5ba-4013-bb97-9e2057cae44e","uri":null,"name":"kconnect.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d73a7537-d483-4663-a54c-7d74e6d48bd9","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"cfda6deb-4a7b-4d34-94eb-36920909aa81","uri":null,"name":"connection.kohls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5caa8628-4f8d-4270-b6ec-22d193c5f587","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"89c50ac4-ebcd-469d-a736-b9afceb49b87","uri":"","name":"kohlsmerch.kohls.com/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6725de18-25b9-4444-89b3-8a8e37fc7265","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"7554f4e9-f43b-4078-ab4e-06615f26e6fd","uri":"http://www.b2b.kohls.com","name":"b2b.kohls.com/","category":"website","ipAddress":null,"description":"Kohl's website","engagementBriefTargetGroupTarget":{"id":"15b69ccb-7c90-471c-819b-0fa282c3eb82","sortOrder":28},"sortOrder":28,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"4f96c427-fa57-405c-bb4c-865627dc3350","code":"kohls","state":"in_progress","endsAt":null,"bountyId":"c6eb0d90-9930-4522-a583-dd72013a4405","startsAt":"2018-04-10T17:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Retail","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/bc7d/7c0c/fe89e93e/3e6f12c54cffeb42950a55e4d87e7b0d_kohls_logo.jpg","logoBackgroundColor":"#86253e","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-01-06T17:45:40.501Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/kohls","changelogs":"/engagements/kohls/changelog","submissions":null,"announcements":"/engagements/kohls/announcements","hallOfFame":"/engagements/kohls/hall_of_fames","crowdstream":null},"announcementsCount":35,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/kohls/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=kohls\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/kohls/engagement_subscribers","engagementChangelogsUrl":"/engagements/kohls/changelog","publishedAt":"2025-09-26T22:38:27.277Z","engagementChangelogUrl":"/engagements/kohls/changelog/127d8b50-3067-4aaf-ae19-de737a1017d5","createUserFeedbacksUrl":"/engagements/kohls/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}