{"id":"da1978e1-ed3f-437b-8a19-7003927c6338","engagementId":"357aea12-1f86-44c7-a7bb-6ab4e9281910","data":{"brief":{"id":"07cdf35f-c4e2-47f5-a011-cb8a47287db2","name":"Macquarie Group Vulnerability Disclosure Program","tagline":"Submit your finding to the Macquarie Group Vulnerability Disclosure Program.","description":"\u003cp\u003eMacquarie Group is committed to providing a secure online environment for our clients and partners. We encourage security researchers to report any suspected vulnerabilities in accordance with this Vulnerability Disclosure Program. We will validate and fix vulnerabilities in accordance with this program.\u003c/p\u003e\n\n\u003cp\u003eThis program or engagement does not allow disclosure. You may not release information about vulnerabilities found in this program or engagement to the public.\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Macquarie Group not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Macquarie Group Services , you can report it to this program. However, be aware that it is ineligible for rewards or points-based compensation.\u003c/p\u003e\n\n\u003cp\u003eThis program or engagement does not allow disclosure. You may not release information about vulnerabilities found in this program or engagement to the public.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eOut of Scope\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eAny forms that would require human interaction (As an example of contact us forms, schedule an appointment, etc.)\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"cfee4ee3-6433-432b-9cc4-71a82e546c44","name":"In Scope","targets":[{"id":"20eae8b1-4458-4fea-bcb8-c8acfbaa321e","uri":"https://www.macquarie.com/","name":"https://macquarie.com/*","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f5b89347-a6d2-449b-8a4e-2b4594176b59","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"20eae8b1-4458-4fea-bcb8-c8acfbaa321e"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"20eae8b1-4458-4fea-bcb8-c8acfbaa321e"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"20eae8b1-4458-4fea-bcb8-c8acfbaa321e"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"20eae8b1-4458-4fea-bcb8-c8acfbaa321e"}],"recentChangeFlags":null},{"id":"42f10426-fc27-47b7-90fe-fecbed4cc3e0","uri":"https://www.metromartinplace.com/","name":"https://www.metromartinplace.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"38b18f3b-095d-4c86-8cfa-bfbb86858072","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"42f10426-fc27-47b7-90fe-fecbed4cc3e0"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"42f10426-fc27-47b7-90fe-fecbed4cc3e0"}],"recentChangeFlags":null},{"id":"f570ccbc-2c35-44f3-95c7-9fe602eac99d","uri":"https://www.1elizabeth.com.au/","name":"https://www.1elizabeth.com.au/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4922361d-2daa-404b-88fa-c5c1d917d773","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"f570ccbc-2c35-44f3-95c7-9fe602eac99d"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"f570ccbc-2c35-44f3-95c7-9fe602eac99d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f570ccbc-2c35-44f3-95c7-9fe602eac99d"}],"recentChangeFlags":null},{"id":"abef0125-760d-4f0e-8e23-6ff674680b12","uri":"https://www.fibramacquarie.com/","name":"https://www.fibramacquarie.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5368f3d9-d113-40bc-a01d-9cd19ba558b0","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"abef0125-760d-4f0e-8e23-6ff674680b12"}],"recentChangeFlags":null},{"id":"ec461024-d65a-41c4-8b97-c44e8f476059","uri":"https://www.mkif.com","name":" https://www.mkif.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"31f1fb26-c4ce-435a-948c-5fcb6efff3b7","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ec461024-d65a-41c4-8b97-c44e8f476059"}],"recentChangeFlags":null},{"id":"b5933865-58c6-49a2-b827-20c224a53520","uri":"https://www.greeninvestmentgroup.com/","name":"https://www.greeninvestmentgroup.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"642439e9-a9a5-42b8-9f0f-dae707806f77","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b5933865-58c6-49a2-b827-20c224a53520"}],"recentChangeFlags":null},{"id":"494d4ab4-35d7-4ea7-8c05-4e3972838b2b","uri":"https://www.macquarie.aero/","name":"https://www.macquarie.aero/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"51562881-ef7c-4cb2-a8e7-4115b1749f0f","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"494d4ab4-35d7-4ea7-8c05-4e3972838b2b"}],"recentChangeFlags":null},{"id":"21bf984a-8cc8-47a0-92b7-caeced7b6195","uri":"https://www.reversemortgageservices.com.au/","name":"https://www.reversemortgageservices.com.au/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d1797e40-72f4-44cb-9083-0932e4d2d816","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"21bf984a-8cc8-47a0-92b7-caeced7b6195"}],"recentChangeFlags":null},{"id":"08b9fb2b-e78c-4f66-8e5b-ec9a4d2a87c0","uri":"https://www.medicalstudentloantrust.com/","name":"https://www.medicalstudentloantrust.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1b47c9f6-13a6-4e04-9d56-78ed06e58968","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"08b9fb2b-e78c-4f66-8e5b-ec9a4d2a87c0"}],"recentChangeFlags":null},{"id":"bf396fa1-98f0-4934-aa9e-ea37c72a38e4","uri":"https://avertas.com.au","name":"https://www.avertas.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a449e631-d205-4b04-9164-b00231c9da08","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"bf396fa1-98f0-4934-aa9e-ea37c72a38e4"}],"recentChangeFlags":null},{"id":"3a60da7f-5eaf-4a99-ad39-c848f1eaacac","uri":"https://www.yourlease.com.au/","name":"*yourlease.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"654b6c9c-e82d-434d-8a5c-47df237b1325","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3a60da7f-5eaf-4a99-ad39-c848f1eaacac"}],"recentChangeFlags":null},{"id":"8b3105c7-8a23-42e8-9697-4a9f993cd62b","uri":"https://fibramacquarie.com","name":"https://www.fibramacquarie.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2307af65-b0ac-4388-93d2-a041c6a76886","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8b3105c7-8a23-42e8-9697-4a9f993cd62b"}],"recentChangeFlags":null},{"id":"81b162ba-b7b8-4dcb-a820-ad0937274fee","uri":"https://macquarie.com.au","name":"*macquarie.com.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f7c2a561-29fe-4644-b1fb-b4fc90c6c099","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"81b162ba-b7b8-4dcb-a820-ad0937274fee"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"81b162ba-b7b8-4dcb-a820-ad0937274fee"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"81b162ba-b7b8-4dcb-a820-ad0937274fee"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"81b162ba-b7b8-4dcb-a820-ad0937274fee"}],"recentChangeFlags":null},{"id":"f1301c8c-2b7d-4875-b151-8f7cc07c658c","uri":"https://www.micnic.com","name":"https://www.micnic.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2a6310bb-f806-4c46-9e6a-0da03b042cc9","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f1301c8c-2b7d-4875-b151-8f7cc07c658c"}],"recentChangeFlags":null},{"id":"32a7e2c9-4c27-467f-934e-da64d20a0c2f","uri":"https://www.mirafunds.com","name":"https://www.mirafunds.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f4374c2f-3363-4089-bd70-6aec92cf807b","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"32a7e2c9-4c27-467f-934e-da64d20a0c2f"}],"recentChangeFlags":null},{"id":"fb75fabc-1ed2-4b18-9bfd-3c570cbaef63","uri":"https://www.coopersquarefund.com","name":"https://www.coopersquarefund.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"369132f4-9c3c-47bf-8b4e-0e3f1a871f6d","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fb75fabc-1ed2-4b18-9bfd-3c570cbaef63"}],"recentChangeFlags":null},{"id":"13828ebe-9e24-4fe2-843e-250a027b6d86","uri":"https://www.macquarieim.com/","name":"https://www.macquarieim.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7a2476f3-8907-4dc3-95f6-b2e9d3c15d1a","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"13828ebe-9e24-4fe2-843e-250a027b6d86"}],"recentChangeFlags":null},{"id":"3ba4273d-90d9-4019-8990-cf730506a4a6","uri":"https://www.centralparkgroup.com","name":"https://www.centralparkgroup.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8965ea99-0362-438a-9c2a-d64447dad1e3","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3ba4273d-90d9-4019-8990-cf730506a4a6"}],"recentChangeFlags":null},{"id":"79123642-32f1-4e07-9704-f4ee65d9afb4","uri":"https://www.martinplacemetro.com","name":"https://www.martinplacemetro.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b224e170-780e-4fcb-969f-fd6d64f48986","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"79123642-32f1-4e07-9704-f4ee65d9afb4"}],"recentChangeFlags":null},{"id":"1a166e9e-4cb6-4548-9fd8-af0a05c8e553","uri":"http://fleete.com/","name":"http://fleete.com/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"798fd522-807e-4663-a17a-f19dee5e6fad","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1a166e9e-4cb6-4548-9fd8-af0a05c8e553"}],"recentChangeFlags":null},{"id":"b6905ff5-e1f5-47c0-a157-1edbb7bbb94c","uri":"https://warrants.com.hk","name":"https://warrants.com.hk","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bbef2f77-6477-4861-87de-87486c7cf293","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b6905ff5-e1f5-47c0-a157-1edbb7bbb94c"}],"recentChangeFlags":null},{"id":"7b83df68-f54f-4b50-aefc-fce238205d6e","uri":"http://malaysiawarrants.com.my","name":"http://malaysiawarrants.com.my/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dd41af36-a322-444f-b944-ce4879390c62","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7b83df68-f54f-4b50-aefc-fce238205d6e"}],"recentChangeFlags":null},{"id":"79fd702c-bd0b-45cd-8f45-fdc11576e6e3","uri":"http://warrants.com.sg/","name":"http://warrants.com.sg/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1a56244d-dc88-42a7-9e45-14e89720d793","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"79fd702c-bd0b-45cd-8f45-fdc11576e6e3"}],"recentChangeFlags":null},{"id":"c61ab34f-bfbf-4637-af8b-9325ea010995","uri":"https://portal.propertyiq.com.au","name":"https://portal.propertyiq.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"144293ad-ad20-42f1-ad80-f9955d2eec58","sortOrder":24},"sortOrder":24,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"c61ab34f-bfbf-4637-af8b-9325ea010995"}],"recentChangeFlags":null},{"id":"5e6a1a1f-1bab-4c7d-afae-7a8d8c39ddfd","uri":"https://piqplus.propertyiq.com.au","name":"piqplus.propertyiq.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9e19aebf-78a0-4d15-b3b8-d7a7aed6f190","sortOrder":25},"sortOrder":25,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5e6a1a1f-1bab-4c7d-afae-7a8d8c39ddfd"}],"recentChangeFlags":null},{"id":"47d70b27-4104-4813-b6e0-9abc381e7c0c","uri":"","name":"api.propertyiq.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3e65f408-f1f6-4bac-ab7e-bf7d9360b59e","sortOrder":26},"sortOrder":26,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"47d70b27-4104-4813-b6e0-9abc381e7c0c"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"357aea12-1f86-44c7-a7bb-6ab4e9281910","code":"macquarie-group-vdp","state":"in_progress","endsAt":null,"bountyId":"04feb258-6dad-4220-adc7-c7b72397c86f","startsAt":"2022-03-10T20:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/af91/10f9/c6e5eb72/cd584211e9010ff07615c880be64e670_macquarie-group-logo-black-vertical.jpg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2022-03-10T20:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/macquarie-group-vdp","changelogs":"/engagements/macquarie-group-vdp/changelog","submissions":null,"announcements":"/engagements/macquarie-group-vdp/announcements","hallOfFame":"/engagements/macquarie-group-vdp/hall_of_fames","crowdstream":null},"announcementsCount":1,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/macquarie-group-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":"updated","userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=macquarie-group-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/macquarie-group-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/macquarie-group-vdp/changelog","publishedAt":"2026-10-02T05:44:07.890Z","engagementChangelogUrl":"/engagements/macquarie-group-vdp/changelog/da1978e1-ed3f-437b-8a19-7003927c6338","createUserFeedbacksUrl":"/engagements/macquarie-group-vdp/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}