{"id":"a59017b7-0667-4b14-821b-107e76a4f9f4","engagementId":"20c23e00-ab05-4238-9d76-0035e1a4449a","data":{"brief":{"id":"0760263a-8272-4c98-a81e-df901637b74b","name":"Minnesota Secretary of State VDP","tagline":"Please submit your findings to this VDP Program!","description":"\u003ch2\u003eVulnerability Disclosure Philosophy\u003c/h2\u003e\n\n\u003cp\u003eThe Office of the Minnesota Secretary of State believes effective disclosure of security vulnerabilities requires mutual trust, respect, transparency and common good between the Office and Security Researchers. Together, our partnership promotes the continued security and privacy of the Office of the Minnesota Secretary of State's users, systems, and data.\u003c/p\u003e\n\n\u003ch2\u003eOur Commitment to Researchers\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eTrust.\u003c/strong\u003e We maintain trust and confidentiality in our professional exchanges with security researchers.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRespect.\u003c/strong\u003e We treat all researchers with respect and recognize your contribution to keeping our customers safe and secure.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTransparency.\u003c/strong\u003e We will work with you to validate and remediate reported vulnerabilities in accordance with our commitment to security and privacy.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCommon Good.\u003c/strong\u003e We investigate and remediate issues in a manner consistent with protecting the safety and security of those potentially affected by a reported vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eWhat We Ask of Researchers\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eTrust.\u003c/strong\u003e We request that you communicate about potential vulnerabilities in a responsible manner, providing sufficient time and information for our team to validate and address potential issues.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRespect.\u003c/strong\u003e We request that researchers make every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction of data during security testing. We also ask that you stop testing and inform us immediately if you find any vulnerabilities that disclose sensitive personal information (e.g. social security numbers, driver's license numbers, date of birth) or financial information (e.g. credit card or banking information), or information classified as private under \u003ca href=\"https://www.revisor.mn.gov/statutes/cite/13\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eMinnesota Statutes, chapter 13\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTransparency.\u003c/strong\u003e We request that researchers provide the technical details and background necessary for our team to identify and validate reported issues, using the form below.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCommon Good.\u003c/strong\u003e We request that researchers act for the common good, protecting user privacy and security by refraining from publicly disclosing unverified vulnerabilities until our team has had time to validate and address reported issues.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eRatings:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"2a38890b-c88e-4bc0-8db0-02059f3fafe6","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Office of the Minnesota Secretary of State not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to The Office of the Minnesota Secretary of State, you can report it to vdp.oss@state.mn.us. However, be aware that it is ineligible for rewards or points-based compensation.\u003c/p\u003e\n\n\u003ch2\u003eOut of Scope testing\u003c/h2\u003e\n\n\u003cp\u003eThe following types of tests and reports are considered out of scope for this program:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDenial of Service tests or any other types of tests that could disrupt the access and use of our systems\u003c/li\u003e\n\u003cli\u003eDefacement\u003c/li\u003e\n\u003cli\u003ePhysical vulnerability testing at our office locations and data centers\u003c/li\u003e\n\u003cli\u003eSocial Engineering\u003c/li\u003e\n\u003cli\u003eReporting informational vulnerabilities such as missing security headers, visible stack traces, potentially vulnerable 3rd party dependencies etc. unless they are exploitable. The Office of the Minnesota Secretary of State and its partners routinely scan the agency's web presence and are likely already aware of any issues that can be caught by an automated scan. The Office of the Minnesota Secretary of State is primarily interested in hearing about vulnerabilities that can actively be leveraged as opposed to theoretical issues.\u003c/li\u003e\n\u003cli\u003eAny actions that violate the good faith filing stance of the office. Researchers must not take any actions impersonating an existing customer or legal entity. For example: researchers must not take actions such submitting filings for a business that has not given the authority to do so, filing a lien against someone, performing an absentee voter request for an existing citizen, or submitting any voter related forms with false data. These types of testing may be considered fraudulent activity and will not fall under the vulnerability disclosure program's authorization provision.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e\n\n\u003ch2\u003eAuthorization\u003c/h2\u003e\n\n\u003cp\u003eIf you make a good faith effort to comply with this policy during your security research, we will consider your research to be authorized. We will work with you to understand and resolve the issue quickly, and the Office of the Minnesota Secretary of State will not recommend or pursue legal action related to your research. \u003c/p\u003e\n\n\u003cp\u003eOutside of this authorization granted to you against in scope assets, you must comply with all applicable Federal, State, and local laws in connection with your security research activities or other participation in this vulnerability disclosure program.\u003c/p\u003e\n\n\u003cp\u003eThe Office of the Minnesota Secretary of State does not authorize, permit, or otherwise allow (expressly or impliedly) any person, including any individual, group of individuals, consortium, partnership, or any other business or legal entity to engage in any security research or vulnerability or threat disclosure activity that is inconsistent with this policy or the law. If you engage in any activities that are inconsistent with this policy or the law, you may be subject to criminal and/or civil liabilities.\u003c/p\u003e\n\n\u003cp\u003eTo the extent that any security research or vulnerability disclosure activity involves the networks, systems, information, applications, products, or services of a non-Minnesota Secretary of State entity (e.g. other State of Minnesota or federal departments or agencies; local, or tribal governments; private sector companies or persons; employees or personnel of any such entities; or any other such third party), that non-Minnesota Secretary of State third party may independently determine whether to pursue legal action or remedies related to such activities. Should legal action be initiated by a third party against you for activities that were conducted in accordance with this policy, we will make this authorization known.\u003c/p\u003e\n\n\u003ch2\u003eVulnerability Reporting and Coordinated Disclosure\u003c/h2\u003e\n\n\u003cp\u003eThe Office of the Minnesota Secretary of State's security team or its partners will acknowledge receipt of each vulnerability report within 7 business days, conduct a thorough investigation, and then take appropriate action for resolution. The Office of the Minnesota Secretary of State strives to remediate any in-scope leverageable vulnerability within 120 days. Researchers may disclose remediated vulnerabilities once given the go-ahead by the Office of the Minnesota Secretary of State or after 120 days (whichever comes first). Any violation of this timeline will be considered a breach of this policy and its protections.\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"f487af71-8742-4e84-b5b8-3bae2ea3cad7","name":"In Scope Public Facing Web Presence ","targets":[{"id":"907e0467-6166-4813-83d3-87ccd897ab58","uri":"https://electionresults.sos.state.mn.us","name":"https://electionresults.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"567ae0f4-d6d4-42f7-8bdd-040f101d7dfb","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"907e0467-6166-4813-83d3-87ccd897ab58"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"907e0467-6166-4813-83d3-87ccd897ab58"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"907e0467-6166-4813-83d3-87ccd897ab58"}],"recentChangeFlags":null},{"id":"e19a9ad4-20a7-411a-a2be-99e6578ceacc","uri":"https://electionresults.sos.mn.gov/","name":"https://electionresults.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"34d26f80-fe6c-4d20-b8c9-4054ac117636","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"e19a9ad4-20a7-411a-a2be-99e6578ceacc"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"e19a9ad4-20a7-411a-a2be-99e6578ceacc"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"e19a9ad4-20a7-411a-a2be-99e6578ceacc"}],"recentChangeFlags":null},{"id":"46ad151f-0131-4d4d-a5fe-d57c6c937201","uri":"https://electionresultsfiles.sos.state.mn.us","name":"https://electionresultsfiles.sos.state.mn.us (election result text files)","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e03799fc-e8be-4b42-9ae4-4488865ee634","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9b78549e-93c0-4650-9680-cea801eabca2","uri":"https://electionresultsfiles.sos.mn.gov","name":"https://electionresultsfiles.sos.mn.gov (election result text files)","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"03fbd0b1-dd82-43ee-858e-6484d829e816","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"4291ae2a-b3e2-4f0f-9290-0d5fd79cabdc","uri":"https://www.sos.state.mn.us","name":"www.sos.state.mn.us","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fb2af356-d9d4-4a61-a234-c8266b653ec3","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"4291ae2a-b3e2-4f0f-9290-0d5fd79cabdc"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"4291ae2a-b3e2-4f0f-9290-0d5fd79cabdc"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"4291ae2a-b3e2-4f0f-9290-0d5fd79cabdc"}],"recentChangeFlags":null},{"id":"f64c8fe0-4822-447f-8318-5e54faf8c15d","uri":"https://www.sos.mn.gov","name":"www.sos.mn.gov","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"93f4ebda-67bf-457a-899f-b1d970bd1d15","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"f64c8fe0-4822-447f-8318-5e54faf8c15d"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"f64c8fe0-4822-447f-8318-5e54faf8c15d"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"f64c8fe0-4822-447f-8318-5e54faf8c15d"}],"recentChangeFlags":null},{"id":"9904e5fa-726c-4553-8656-48a138440af0","uri":"https://mnvotes.sos.mn.gov","name":"mnvotes.sos.mn.gov","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a4281c01-cdbd-401b-885a-0f1b4ffc6548","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"9904e5fa-726c-4553-8656-48a138440af0"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"9904e5fa-726c-4553-8656-48a138440af0"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"9904e5fa-726c-4553-8656-48a138440af0"}],"recentChangeFlags":null},{"id":"6f92a03c-042b-4667-840f-a8b345ced9c8","uri":"https://apostille.sos.state.mn.us","name":"https://apostille.sos.state.mn.us","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b0b88d60-760e-4df3-821e-5a995ab8714c","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"6f92a03c-042b-4667-840f-a8b345ced9c8"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"6f92a03c-042b-4667-840f-a8b345ced9c8"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"6f92a03c-042b-4667-840f-a8b345ced9c8"}],"recentChangeFlags":null},{"id":"3a0189f9-948e-446a-91e5-82a94ef54c8c","uri":"https://apostille.sos.mn.gov","name":"https://apostille.sos.mn.gov","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b702b62e-e1a0-49d3-b680-e01f23f41087","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"3a0189f9-948e-446a-91e5-82a94ef54c8c"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"3a0189f9-948e-446a-91e5-82a94ef54c8c"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"3a0189f9-948e-446a-91e5-82a94ef54c8c"}],"recentChangeFlags":null},{"id":"84d28b3d-56b6-46a9-bdd7-38b341d52782","uri":"https://commoncontent.sos.mn.gov","name":"https://commoncontent.sos.mn.gov (domain for static web assets)","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"69a83647-0e30-4afc-aa62-0653f15783aa","sortOrder":0},"sortOrder":0,"tags":[{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"84d28b3d-56b6-46a9-bdd7-38b341d52782"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"84d28b3d-56b6-46a9-bdd7-38b341d52782"}],"recentChangeFlags":null},{"id":"55236575-8f2d-4d42-832d-778fa6c80405","uri":"https://commoncontent.sos.state.mn.us","name":"https://commoncontent.sos.state.mn.us (domain for static web assets)","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6337954e-84a1-43d5-8105-4b676cab968f","sortOrder":0},"sortOrder":0,"tags":[{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"55236575-8f2d-4d42-832d-778fa6c80405"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"55236575-8f2d-4d42-832d-778fa6c80405"}],"recentChangeFlags":null},{"id":"08dba353-175a-4fc0-8ac4-82a95906315e","uri":"https://notary.sos.mn.gov/","name":"https://notary.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"086761c4-e407-4e02-a6c4-0b4ec049df38","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"08dba353-175a-4fc0-8ac4-82a95906315e"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"08dba353-175a-4fc0-8ac4-82a95906315e"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"08dba353-175a-4fc0-8ac4-82a95906315e"}],"recentChangeFlags":null},{"id":"8e2cb889-6fdc-49ea-90be-4d84da836b11","uri":"https://notary.sos.state.mn.us/","name":"https://notary.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0003a343-13db-4098-8225-ffe35066de1f","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"8e2cb889-6fdc-49ea-90be-4d84da836b11"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"8e2cb889-6fdc-49ea-90be-4d84da836b11"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"8e2cb889-6fdc-49ea-90be-4d84da836b11"}],"recentChangeFlags":null},{"id":"ce36b5f4-0406-4385-b328-76a04885779b","uri":"https://officialdocuments.sos.mn.gov","name":"https://officialdocuments.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e0a05fef-043b-49fa-adb0-da753c9bac75","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"ce36b5f4-0406-4385-b328-76a04885779b"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"ce36b5f4-0406-4385-b328-76a04885779b"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"ce36b5f4-0406-4385-b328-76a04885779b"}],"recentChangeFlags":null},{"id":"7c10dbd1-da64-4902-862f-0d3dca833935","uri":"https://officialdocuments.sos.state.mn.us","name":"https://officialdocuments.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5bdf931b-1e48-477e-8b7d-3df6c3c1b8cb","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"7c10dbd1-da64-4902-862f-0d3dca833935"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"7c10dbd1-da64-4902-862f-0d3dca833935"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"7c10dbd1-da64-4902-862f-0d3dca833935"}],"recentChangeFlags":null},{"id":"eeb1ee47-c784-4e47-b2c6-87d7aed41eb0","uri":"https://mblsportal.sos.state.mn.us","name":"mblsportal.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"72cf8cd2-5ac2-4c81-8612-5db333c6a580","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"eeb1ee47-c784-4e47-b2c6-87d7aed41eb0"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"eeb1ee47-c784-4e47-b2c6-87d7aed41eb0"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"eeb1ee47-c784-4e47-b2c6-87d7aed41eb0"}],"recentChangeFlags":null},{"id":"06a17d55-78a1-45c3-b61f-c4c692b6f4ac","uri":"https://mblsportal.sos.mn.gov","name":"mblsportal.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3ddde37b-4b7c-4403-85ca-9a728191d9a4","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"06a17d55-78a1-45c3-b61f-c4c692b6f4ac"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"06a17d55-78a1-45c3-b61f-c4c692b6f4ac"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"06a17d55-78a1-45c3-b61f-c4c692b6f4ac"}],"recentChangeFlags":null},{"id":"cb4c4cac-e875-494f-897a-4faf31617bf5","uri":"https://commissionsandappointments.sos.state.mn.us","name":"commissionsandappointments.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"46b5ddef-bc17-49c4-850e-bd90bb2f3ff4","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"cb4c4cac-e875-494f-897a-4faf31617bf5"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"cb4c4cac-e875-494f-897a-4faf31617bf5"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"cb4c4cac-e875-494f-897a-4faf31617bf5"}],"recentChangeFlags":null},{"id":"02aca09a-1c5d-4d01-a583-64952b50c5f1","uri":"https://commissionsandappointments.sos.mn.gov","name":"commissionsandappointments.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a116faab-c790-460b-adec-9f61b087f871","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"02aca09a-1c5d-4d01-a583-64952b50c5f1"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"02aca09a-1c5d-4d01-a583-64952b50c5f1"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"02aca09a-1c5d-4d01-a583-64952b50c5f1"}],"recentChangeFlags":null},{"id":"bff9920f-c8b0-4fb5-956b-47d597cf70da","uri":"https://pollfinder.sos.state.mn.us","name":"pollfinder.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d17f0d4b-0af0-43fc-a5ff-dfcf66d5f291","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"bff9920f-c8b0-4fb5-956b-47d597cf70da"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"bff9920f-c8b0-4fb5-956b-47d597cf70da"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"bff9920f-c8b0-4fb5-956b-47d597cf70da"}],"recentChangeFlags":null},{"id":"9818419a-0aeb-4726-b817-818d5769bcf3","uri":"https://pollfinder.sos.mn.gov","name":"pollfinder.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"560ca41f-aa94-4546-8b79-835cc7062214","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"9818419a-0aeb-4726-b817-818d5769bcf3"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"9818419a-0aeb-4726-b817-818d5769bcf3"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"9818419a-0aeb-4726-b817-818d5769bcf3"}],"recentChangeFlags":null},{"id":"46379880-b20b-410b-a4d4-9b5fc34adb98","uri":"https://myballotmn.sos.state.mn.us","name":"myballotmn.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9d83ed62-e2e8-4a96-a771-2e7ec4722c85","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"46379880-b20b-410b-a4d4-9b5fc34adb98"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"46379880-b20b-410b-a4d4-9b5fc34adb98"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"46379880-b20b-410b-a4d4-9b5fc34adb98"}],"recentChangeFlags":null},{"id":"d803df76-fb1b-4261-9410-740d2d3e1d9c","uri":"https://myballotmn.sos.mn.gov","name":"myballotmn.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8c60f402-e525-440f-bc8d-d05a2d25ba05","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"d803df76-fb1b-4261-9410-740d2d3e1d9c"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"d803df76-fb1b-4261-9410-740d2d3e1d9c"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"d803df76-fb1b-4261-9410-740d2d3e1d9c"}],"recentChangeFlags":null},{"id":"658b591d-3f1c-45b8-88b3-fd7924c7fc01","uri":"https://caucusfinder.sos.state.mn.us","name":"caucusfinder.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3c76c4e6-6f1f-4977-8a63-f731c395e871","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"658b591d-3f1c-45b8-88b3-fd7924c7fc01"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"658b591d-3f1c-45b8-88b3-fd7924c7fc01"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"658b591d-3f1c-45b8-88b3-fd7924c7fc01"}],"recentChangeFlags":null},{"id":"b950ba91-afb7-48f0-90cf-77018c0a437d","uri":"https://caucusfinder.sos.mn.gov","name":"caucusfinder.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"34828b41-a5a1-4cb0-8c6a-f8e6ffc7b53f","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"b950ba91-afb7-48f0-90cf-77018c0a437d"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"b950ba91-afb7-48f0-90cf-77018c0a437d"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"b950ba91-afb7-48f0-90cf-77018c0a437d"}],"recentChangeFlags":null},{"id":"2539738c-9110-479c-8335-694b79268826","uri":"https://candidates.sos.state.mn.us","name":"candidates.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cb5f08e3-c151-446d-ba71-aaadff4a6904","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"2539738c-9110-479c-8335-694b79268826"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"2539738c-9110-479c-8335-694b79268826"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"2539738c-9110-479c-8335-694b79268826"}],"recentChangeFlags":null},{"id":"ed9bdfeb-64ed-4af9-8c26-b7dd2e8d6db2","uri":"https://candidates.sos.mn.gov","name":"candidates.sos.mn.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"54543039-1d22-4596-b362-4d4bec552c3a","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"ed9bdfeb-64ed-4af9-8c26-b7dd2e8d6db2"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"ed9bdfeb-64ed-4af9-8c26-b7dd2e8d6db2"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"ed9bdfeb-64ed-4af9-8c26-b7dd2e8d6db2"}],"recentChangeFlags":null},{"id":"be5cdf1a-ab6a-4c50-a87e-9c5753507602","uri":"https://mnvotes.sos.state.mn.us","name":"mnvotes.sos.state.mn.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"05b95b26-7886-4c7e-873b-5f616508e3df","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"be5cdf1a-ab6a-4c50-a87e-9c5753507602"},{"id":"a634fd4f-7410-4f25-9d18-31f9ce752854","name":"CSS","targetId":"be5cdf1a-ab6a-4c50-a87e-9c5753507602"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"be5cdf1a-ab6a-4c50-a87e-9c5753507602"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThe following domains are within scope. Each in-scope target has both a .sos.mn.gov and a .sos.state.mn.us domain pointing to it. The domains are aliases of each other so you should make reports against only one of the aliases for each domain. \u003c/p\u003e\n\n\u003cp\u003ePlease check back frequently as the scope will be expanded over time.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"20c23e00-ab05-4238-9d76-0035e1a4449a","code":"mn-secretary-of-state-vdp","state":"in_progress","endsAt":null,"bountyId":"335948db-e264-40a5-ba4d-9053de613f44","startsAt":"2023-02-14T18:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Government","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/5865/ecae/3ed2b123/007927fefa3f8b75a229e255d0cb9d4d_StateSeal.png","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2023-02-14T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/mn-secretary-of-state-vdp","changelogs":"/engagements/mn-secretary-of-state-vdp/changelog","submissions":null,"announcements":"/engagements/mn-secretary-of-state-vdp/announcements","hallOfFame":"/engagements/mn-secretary-of-state-vdp/hall_of_fames","crowdstream":"/engagements/mn-secretary-of-state-vdp/crowdstream"},"announcementsCount":4,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/mn-secretary-of-state-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=mn-secretary-of-state-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/mn-secretary-of-state-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/mn-secretary-of-state-vdp/changelog","publishedAt":"2024-03-20T17:45:39.008Z","engagementChangelogUrl":"/engagements/mn-secretary-of-state-vdp/changelog/a59017b7-0667-4b14-821b-107e76a4f9f4","createUserFeedbacksUrl":"/engagements/mn-secretary-of-state-vdp/feedbacks","engagementCrowdstreamUrl":"/engagements/mn-secretary-of-state-vdp/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}