{"id":"78091ed2-458c-4c85-ba6b-f585fd7c6d72","engagementId":"9261b74f-bee5-4423-9cf6-58049deaafaa","data":{"brief":{"id":"acca5bb4-43fb-4002-8dc6-ec79eefc0f85","name":"Monash University Bug Bounty","tagline":"Monash University is Australia’s largest and most international university","description":"\u003cp\u003eMonash University is committed to protecting the confidentiality, integrity and availability of its information and digital platforms. At Monash, we value and support the work undertaken by the security research community and appreciate it when researchers take the time to report potential security vulnerabilities to us. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our technology systems. Good luck, and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eRules  of engagement\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eMonash University staff, students, and other affiliated persons must obtain explicit prior authorisation\u003c/strong\u003e from the office of Group Chief Information Security Officer (GCISO) before participating in the Bug Bounty Program. Participation in the program does not, by itself, constitute authorisation to test, investigate, explore or attempt to identify security vulnerabilities in University IT environments.\u003c/li\u003e\n\u003cli\u003e All email addresses belonging to researchers should be your @bugcrowdninja.com.\u003c/li\u003e\n\u003cli\u003eMake a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of \nour services.\u003c/li\u003e\n\u003cli\u003eDo not modify data that does not belong to you.\u003c/li\u003e\n\u003cli\u003eYou’ll be testing production systems, Please be reasonable with the use of automated tools.\u003c/li\u003e\n\u003cli\u003eTools that may result in a Denial Of Service (DoS) are prohibited.\u003c/li\u003e\n\u003cli\u003ePlease be sure to check domain records to confirm Monash University ownership; Do not test assets not \nowned and controlled by Monash University.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003ePublic Disclosure:\u003c/h2\u003e\n\n\u003cp\u003eMonash University does not permit public disclosure at this point in time. Exceptions will be made if the Monash University Cyber Risk \u0026amp; Resilience Team believes it is in the best interest of the general public and these will typically be done via CVE publication.  In this situation, we would reach out to the researcher to ask if they would like to be acknowledged and named in the CVE record.\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"f2d64fa8-5daf-49ef-8de8-edc7da2dfb4a","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Monash University not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Monash University, you can report it to \u003ca href=\"https://www.monash.edu/report-security-vulnerabilities\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eMonash VDP program\u003c/a\u003e  However, be aware that the VDP provides for points-based compensation only.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eTargets are publicly available over the internet. Please note that there may be Geo-restrictions for the Android App. You may need to use an Australian IP in order to access it\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eCredentials:\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eCredentials are not provided for this program\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eOut-of-Scope \u0026amp; Exclusions\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eUntil further notice ALL XSS submissions will be considered Out of Scope\u003c/li\u003e\n\u003cli\u003eSelf XSS\u003c/li\u003e\n\u003cli\u003eContent Spoofing Vulnerabilities\u003c/li\u003e\n\u003cli\u003e DNS configuration related issues\u003c/li\u003e\n\u003cli\u003eHost Header Injection (without providing an exploitable scenario)\u003c/li\u003e\n\u003cli\u003eHTTP Trace method is enabled\u003c/li\u003e\n\u003cli\u003eIssues present only in older versions of browsers, plugins or any other software\u003c/li\u003e\n\u003cli\u003eLow Impact CSRF issues, including but not limited to login and Logout CSRF\u003c/li\u003e\n\u003cli\u003eLow Severity Clickjacking Vulnerabilities\u003c/li\u003e\n\u003cli\u003eMissing Rate Limiting Protections (unless corresponding to authentication flow)\u003c/li\u003e\n\u003cli\u003eMissing SPF/DKIM/DMARC policies\u003c/li\u003e\n\u003cli\u003eMissing Security Headers and Cookie Flags, which can’t be exploited by themselves ( for example Strict-Transport-Security, HTTPOnly)\u003c/li\u003e\n\u003cli\u003eServer Configuration related issues that are not exploitable\u003c/li\u003e\n\u003cli\u003eSpam e-mail (missing rate limiting protections)\u003c/li\u003e\n\u003cli\u003eSSL vulnerabilities related to configuration, version, weak ciphers (without a working exploit)\u003c/li\u003e\n\u003cli\u003eUse of a vulnerable 3rd party library/code snippet (without providing an exploitable scenario)\u003c/li\u003e\n\u003cli\u003eInfo.php (without providing an exploitable scenario)\u003c/li\u003e\n\u003cli\u003eSubdomain takeover\u003c/li\u003e\n\u003cli\u003eFor https://compulsoryunits.monash.edu and https://study.abroad.monash.edu any submission related to compromised credentials are excluded \u003c/li\u003e\n\u003cli\u003eFor https://myapp.monash.edu/ any submissions related to aura are excluded \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"d2c44dd2-8587-494c-b657-4c957d42f202","name":"Monash University - In Scope Targets - Tier 0","targets":[{"id":"57c2a4fa-539b-4dfc-ab6a-47b8f543aca7","uri":"https://identity.monash.edu/","name":"  identity.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3864fcf3-07bd-4969-b124-864d97be44ff","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"57c2a4fa-539b-4dfc-ab6a-47b8f543aca7"},{"id":"6a6422df-c1b1-41ec-b38b-dda504c1fee1","name":"Okta","targetId":"57c2a4fa-539b-4dfc-ab6a-47b8f543aca7"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"57c2a4fa-539b-4dfc-ab6a-47b8f543aca7"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57c2a4fa-539b-4dfc-ab6a-47b8f543aca7"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"57c2a4fa-539b-4dfc-ab6a-47b8f543aca7"}],"recentChangeFlags":null},{"id":"f04c677b-f3f7-477e-9c26-c2a1fdfbdbd4","uri":"","name":" mix.monash.edu ","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b6177fce-dfed-4888-89d8-5299ce5767e7","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"f04c677b-f3f7-477e-9c26-c2a1fdfbdbd4"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"f04c677b-f3f7-477e-9c26-c2a1fdfbdbd4"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"6d72ea2b-14e4-4125-ad98-a216106b14b4","p1MaxCents":750000,"p1MinCents":500000,"p2MaxCents":350000,"p2MinCents":250000,"p3MaxCents":150000,"p3MinCents":75000,"p4MaxCents":50000,"p4MinCents":25000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":1000000},"descriptionHtml":null,"rewardRangeData":{"1":{"min":5000,"max":7500},"2":{"min":2500,"max":3500},"3":{"min":750,"max":1500},"4":{"min":250,"max":500},"5":{"min":null,"max":null},"programMax":10000},"recentChangeFlags":null},{"id":"b1ff34bb-d3ce-42cc-a060-3f15e06b60eb","name":"Monash University -  In Scope Targets - Tier 1","targets":[{"id":"85c781de-e789-4b6d-bdb0-f584b2f1af7a","uri":"https://connect.monash.edu","name":"connect.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5d8e949d-849b-465d-8922-bfbd70d39703","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"85c781de-e789-4b6d-bdb0-f584b2f1af7a"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"85c781de-e789-4b6d-bdb0-f584b2f1af7a"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"85c781de-e789-4b6d-bdb0-f584b2f1af7a"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"85c781de-e789-4b6d-bdb0-f584b2f1af7a"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"85c781de-e789-4b6d-bdb0-f584b2f1af7a"}],"recentChangeFlags":null},{"id":"02844b94-7a05-4eeb-8aed-deca79c1799f","uri":"https://identity.monash.edu","name":"identity.monash.edu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1027a9bc-864f-4ef3-9e16-09907a4eaaaa","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"02844b94-7a05-4eeb-8aed-deca79c1799f"},{"id":"4592d652-bb2d-4ab9-8720-08fe80de0dc4","name":"Backbone","targetId":"02844b94-7a05-4eeb-8aed-deca79c1799f"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"02844b94-7a05-4eeb-8aed-deca79c1799f"}],"recentChangeFlags":null},{"id":"c5a89212-04c8-4129-baed-4b570290ecac","uri":"https://www.monash.edu","name":"monash.edu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"99c59051-2504-434d-8651-e7155de44c1a","sortOrder":0},"sortOrder":0,"tags":[{"id":"9f26f47e-4acd-4d8d-aad2-414b6b367eb0","name":"Handlebars","targetId":"c5a89212-04c8-4129-baed-4b570290ecac"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"c5a89212-04c8-4129-baed-4b570290ecac"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"c5a89212-04c8-4129-baed-4b570290ecac"},{"id":"b556fc49-2c15-4167-b815-c89ac5d8a974","name":"Lua","targetId":"c5a89212-04c8-4129-baed-4b570290ecac"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"c5a89212-04c8-4129-baed-4b570290ecac"}],"recentChangeFlags":null},{"id":"b4de423b-a255-4a9c-b3a7-d4d82f5cc291","uri":"https://staff.monash","name":"Staff.monash","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"69989676-a9b3-4338-a50d-4a99c3fdf920","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"b4de423b-a255-4a9c-b3a7-d4d82f5cc291"},{"id":"6a6422df-c1b1-41ec-b38b-dda504c1fee1","name":"Okta","targetId":"b4de423b-a255-4a9c-b3a7-d4d82f5cc291"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b4de423b-a255-4a9c-b3a7-d4d82f5cc291"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"b4de423b-a255-4a9c-b3a7-d4d82f5cc291"}],"recentChangeFlags":null},{"id":"6400ce69-de29-40de-819c-a1cd30dc89db","uri":"http://apps.connect.monash.edu/","name":"apps.connect.monash.edu/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b19aa6aa-bf29-4fd4-823d-cd7168de58f8","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"6400ce69-de29-40de-819c-a1cd30dc89db"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"6400ce69-de29-40de-819c-a1cd30dc89db"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"6400ce69-de29-40de-819c-a1cd30dc89db"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6400ce69-de29-40de-819c-a1cd30dc89db"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"6400ce69-de29-40de-819c-a1cd30dc89db"}],"recentChangeFlags":null},{"id":"ade0e76a-776f-4437-842b-c01f733a3d8c","uri":"","name":"eassessment.monash.edu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"19603086-f907-4e5a-a940-b3ad2f2131a5","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"ade0e76a-776f-4437-842b-c01f733a3d8c"},{"id":"9558d6b3-9880-4506-9e19-55dc1d7d8aff","name":"RequireJS","targetId":"ade0e76a-776f-4437-842b-c01f733a3d8c"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"ade0e76a-776f-4437-842b-c01f733a3d8c"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"ade0e76a-776f-4437-842b-c01f733a3d8c"},{"id":"b7116a08-d333-4fd4-a5b7-d715af3f7d23","name":"YUI","targetId":"ade0e76a-776f-4437-842b-c01f733a3d8c"}],"recentChangeFlags":null},{"id":"bb640e9c-9b5c-4228-982e-2fba563441ed","uri":"https://fileshare.ze.monash.edu","name":"fileshare.ze.monash.edu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"cf5bc82f-95f6-47f2-a9f3-12d25563a1bd","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"bb640e9c-9b5c-4228-982e-2fba563441ed"},{"id":"73ea470f-6fb9-4636-900b-259e5466f37e","name":"Apache httpd","targetId":"bb640e9c-9b5c-4228-982e-2fba563441ed"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"bb640e9c-9b5c-4228-982e-2fba563441ed"}],"recentChangeFlags":null},{"id":"a18fb849-ad82-4160-b9cb-7a2d14017315","uri":"https://cms.mobile.monash/ ","name":"cms.mobile.monash","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4da4e478-bb9f-4364-9afc-ca5bf14604e2","sortOrder":0},"sortOrder":0,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"a18fb849-ad82-4160-b9cb-7a2d14017315"},{"id":"a5bf7fc5-03c4-42f4-b10d-5ceb23d1c064","name":"Lodash","targetId":"a18fb849-ad82-4160-b9cb-7a2d14017315"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a18fb849-ad82-4160-b9cb-7a2d14017315"}],"recentChangeFlags":null},{"id":"a8680180-488f-4cf4-adf6-4da10ac1616b","uri":"https://mobile.monash/ ","name":"mobile.monash","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"12a764fd-e26e-4fdb-bb3e-d8ab5e6db712","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a8680180-488f-4cf4-adf6-4da10ac1616b"}],"recentChangeFlags":null},{"id":"ae19cbe6-e0be-4449-8801-6434e8da16ba","uri":"https://status.mobile.monash/","name":"status.mobile.monash","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"063bcc77-f424-4a73-b48a-18bf0ba980c0","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ae19cbe6-e0be-4449-8801-6434e8da16ba"}],"recentChangeFlags":null},{"id":"8a4fbdda-9a74-4a5f-bed8-d1b1e038c8f0","uri":"https://monashcollege.edu.au","name":"https://monashcollege.edu.au","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"58a7e750-f4a9-4149-a5a6-7740437b52e5","sortOrder":0},"sortOrder":0,"tags":[{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"8a4fbdda-9a74-4a5f-bed8-d1b1e038c8f0"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8a4fbdda-9a74-4a5f-bed8-d1b1e038c8f0"}],"recentChangeFlags":null},{"id":"fe48aeda-8cae-47b7-84f5-5c809013c029","uri":"https://online.monash.edu/","name":"https://online.monash.edu/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a55d0f15-ab56-4cb1-9a1f-b05bda500b40","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"fe48aeda-8cae-47b7-84f5-5c809013c029"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"fe48aeda-8cae-47b7-84f5-5c809013c029"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"fe48aeda-8cae-47b7-84f5-5c809013c029"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fe48aeda-8cae-47b7-84f5-5c809013c029"}],"recentChangeFlags":null},{"id":"ed1a2b07-17b2-4c1e-ac18-ea355de7a92d","uri":"https://apps.apple.com/us/app/monash-study/id1462126829","name":"Monash Study iOS App","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0c99d15a-a45b-4421-8305-da6eaaaf7747","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"ed1a2b07-17b2-4c1e-ac18-ea355de7a92d"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"ed1a2b07-17b2-4c1e-ac18-ea355de7a92d"}],"recentChangeFlags":null},{"id":"03f34552-0fa0-4440-8276-8c87d4308f19","uri":"https://play.google.com/store/apps/details?id=edu.monash.monashmobile","name":"Monash Study Android app","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"78af3ac2-1f3b-4f40-91d7-d539d7f33cde","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"03f34552-0fa0-4440-8276-8c87d4308f19"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"03f34552-0fa0-4440-8276-8c87d4308f19"}],"recentChangeFlags":null},{"id":"438a7c28-94bf-4023-bb6e-46f3acca2860","uri":"https://myapp.monash.edu/","name":"https://myapp.monash.edu/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fa93c8d5-1839-4ab3-af40-b1629d88fff9","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"438a7c28-94bf-4023-bb6e-46f3acca2860"}],"recentChangeFlags":null},{"id":"e90acf89-29a1-4dc1-ade7-2316176caf50","uri":"https://alumni-friends.monash.edu","name":"https://alumni-friends.monash.edu","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bb5a8e4c-f869-4dbd-8196-fb313023ef76","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e90acf89-29a1-4dc1-ade7-2316176caf50"}],"recentChangeFlags":null},{"id":"27010a0d-3120-4b44-80c9-237b7ba668bf","uri":"https://agent.apps.monash.edu/","name":"https://agent.apps.monash.edu/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ec3a436c-7adf-4beb-ad7c-9e19e9fff8ed","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"27010a0d-3120-4b44-80c9-237b7ba668bf"}],"recentChangeFlags":null},{"id":"13f8fc9e-e63f-4670-ba94-a79fb7d704ac","uri":"https://compulsoryunits.monash.edu/","name":"https://compulsoryunits.monash.edu/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c3d2f0f1-fb67-437a-bb96-d3a2f6e321cf","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"13f8fc9e-e63f-4670-ba94-a79fb7d704ac"}],"recentChangeFlags":null},{"id":"cbcadc62-591d-496d-a523-265a301100cb","uri":"https://monash.app.nutrip.com","name":"monash.app.nutrip.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3938c9f3-2328-44b8-91a0-4e69442acc7e","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"3cb6e25d-acb5-44ba-9934-e043b0e62209","uri":"https://*.gp.monash.edu","name":"*.gp.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"26b5959e-2358-4d65-a07d-41e8e0824533","sortOrder":19},"sortOrder":19,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"3cb6e25d-acb5-44ba-9934-e043b0e62209"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3cb6e25d-acb5-44ba-9934-e043b0e62209"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"2e3de949-3ec1-4e41-93b4-234981dea296","p1MaxCents":250000,"p1MinCents":210000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":500000},"descriptionHtml":"\u003cp\u003eMonash has added a Maximum payout, this will be paid at Monash\u0026#39;s sole discretion if a P1 submission goes above and beyond, potentially causing significant impact to Monash if exposed and exploited.\u003c/p\u003e","rewardRangeData":{"1":{"min":2100,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null},"programMax":5000},"recentChangeFlags":null},{"id":"35a9b6d6-edea-45c2-b9ec-a80700bbf5c2","name":"Monash University - In Scope Targets - Tier 2","targets":[{"id":"729d5283-c4d7-4946-909d-d073c4060601","uri":"https://studentplacements.monash.edu","name":"studentplacements.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"de162b63-7a0a-4ff9-9633-381e68802a85","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"729d5283-c4d7-4946-909d-d073c4060601"}],"recentChangeFlags":null},{"id":"1afe606f-7d00-4a4c-b6eb-95eddd7ee1b0","uri":"https://unihub.monash.edu/","name":"unihub.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a0b72b48-4442-4ec1-9195-d2b6c4b67295","sortOrder":2},"sortOrder":2,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1afe606f-7d00-4a4c-b6eb-95eddd7ee1b0"}],"recentChangeFlags":null},{"id":"5a44d1b5-77c1-47b7-ba97-f934127f457a","uri":"https://interviews.monash.edu/","name":"interviews.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"581edf44-231b-4358-8fa7-274aca8a7934","sortOrder":3},"sortOrder":3,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5a44d1b5-77c1-47b7-ba97-f934127f457a"}],"recentChangeFlags":null},{"id":"6c4f8709-a371-45df-afab-24cf4dcc7842","uri":"https://shop.monash.edu/","name":"shop.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"872340cf-eb98-4fb7-90d4-fe2b094d28dd","sortOrder":4},"sortOrder":4,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6c4f8709-a371-45df-afab-24cf4dcc7842"}],"recentChangeFlags":null},{"id":"610a5ca1-c3f5-49af-b7d5-24d7e12a8bb5","uri":"https://mlivetickets.monash.edu","name":"mlivetickets.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6777c563-7138-4646-85c3-9bfca478f947","sortOrder":5},"sortOrder":5,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"610a5ca1-c3f5-49af-b7d5-24d7e12a8bb5"}],"recentChangeFlags":null},{"id":"c5696f14-4d8f-41df-8049-3e41cb83b3e4","uri":"https://partner.apps.monash.edu","name":"partner.apps.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c9a68e98-7839-4bf5-a11b-65ca3414733b","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"03bb4988-9f9c-4785-8cf0-167791c59446","uri":"https://play.google.com/store/apps/details?id=com.scu.bsafe","name":"bSafe Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0c0f5181-ee4f-44ff-ae40-73d89d8a5ffc","sortOrder":7},"sortOrder":7,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"03bb4988-9f9c-4785-8cf0-167791c59446"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"03bb4988-9f9c-4785-8cf0-167791c59446"}],"recentChangeFlags":null},{"id":"0f2b4896-2f76-4dff-923b-9393cfbac512","uri":"https://apps.apple.com/au/app/monash-bsafe/id1462241951","name":"bSafe iPhone App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9c763ff3-023d-4115-aeb4-eea3817cecd3","sortOrder":8},"sortOrder":8,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"0f2b4896-2f76-4dff-923b-9393cfbac512"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"0f2b4896-2f76-4dff-923b-9393cfbac512"}],"recentChangeFlags":null},{"id":"39348718-69b8-4cc4-8b63-1cff6badb876","uri":"https://forms.apps.monash.edu/","name":"forms.apps.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c3f9c9ba-8671-4fc3-91fa-1fe68586cf95","sortOrder":9},"sortOrder":9,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"39348718-69b8-4cc4-8b63-1cff6badb876"}],"recentChangeFlags":null},{"id":"3328b2dc-1eb0-453f-a0bc-a633eb20719b","uri":"https://formative.eassessment.monash.edu/","name":"formative.eassessment.monas.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3bb6d530-7ba7-45cb-8edd-19fc56d3d69c","sortOrder":10},"sortOrder":10,"tags":[{"id":"95db792c-091b-4c81-8d72-b09b1d065f09","name":"Cloud","targetId":"3328b2dc-1eb0-453f-a0bc-a633eb20719b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3328b2dc-1eb0-453f-a0bc-a633eb20719b"}],"recentChangeFlags":null},{"id":"924cd07e-7509-4da1-9b2e-ad08efa58cd4","uri":"https://www.monashprofessional.edu.au/","name":"monashprofessional.edu.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ee34f520-a863-4cd5-bdc6-8aa5c35f3446","sortOrder":11},"sortOrder":11,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"924cd07e-7509-4da1-9b2e-ad08efa58cd4"}],"recentChangeFlags":null},{"id":"30af03ba-8ac2-4b78-9a1d-6885c43c12da","uri":"https://account-registration.monash.edu/","name":"account-registration.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"36dbe13d-e080-486c-8f90-f21ff2279509","sortOrder":12},"sortOrder":12,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"30af03ba-8ac2-4b78-9a1d-6885c43c12da"}],"recentChangeFlags":null},{"id":"ee33db06-c1e9-4f57-b183-46a9554181fd","uri":"http://pay.monashcollege.edu.au/","name":"pay.monashcollege.edu.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7b138b41-6d54-4b59-8b34-0968cd9d566b","sortOrder":13},"sortOrder":13,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ee33db06-c1e9-4f57-b183-46a9554181fd"}],"recentChangeFlags":null},{"id":"e191fdee-1255-4da7-b454-5e365debd3da","uri":"https://evigilation.monash.edu","name":"Monash e-Vigilation","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"550ea1f9-82d2-4ee8-be95-d27f0b6272e3","sortOrder":14},"sortOrder":14,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"e191fdee-1255-4da7-b454-5e365debd3da"},{"id":"6a6422df-c1b1-41ec-b38b-dda504c1fee1","name":"Okta","targetId":"e191fdee-1255-4da7-b454-5e365debd3da"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e191fdee-1255-4da7-b454-5e365debd3da"}],"recentChangeFlags":null},{"id":"cdbd8571-68f8-4025-aa0a-9567e3fe8c48","uri":"https://student.monash","name":"student.monash","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d5a79f6a-8f11-4e2c-9d23-bcb6a18d245e","sortOrder":15},"sortOrder":15,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cdbd8571-68f8-4025-aa0a-9567e3fe8c48"}],"recentChangeFlags":null},{"id":"96205aab-713f-4d97-81df-404497dbc08b","uri":"https://mids.monash.edu/","name":"mids.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ba58703c-4188-4436-9390-3990064d6cf7","sortOrder":16},"sortOrder":16,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"96205aab-713f-4d97-81df-404497dbc08b"}],"recentChangeFlags":null},{"id":"cf39bbbb-a390-4ecb-a364-a275b1d2586c","uri":"https://ims.monash.edu","name":"ims.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"76d80066-04c3-46f2-a630-0a4bd548a58c","sortOrder":17},"sortOrder":17,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cf39bbbb-a390-4ecb-a364-a275b1d2586c"}],"recentChangeFlags":null},{"id":"2e91e8c2-6734-482a-b3a7-8842ed504f2c","uri":"https://research.monash.edu/","name":"research.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"85900fbd-1e8b-41be-8122-b722633c1b99","sortOrder":18},"sortOrder":18,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2e91e8c2-6734-482a-b3a7-8842ed504f2c"}],"recentChangeFlags":null},{"id":"0cd46954-8f89-4432-98f7-cef734ec04a8","uri":"https://researchmgt.monash.edu/","name":"researchmgt.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fed75ce0-22a5-47ad-83c0-d21d98f5911d","sortOrder":19},"sortOrder":19,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0cd46954-8f89-4432-98f7-cef734ec04a8"}],"recentChangeFlags":null},{"id":"83693822-b77d-425c-85bf-10b88630b805","uri":"https://move.monash.edu/","name":"move.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2f93a7a2-3b2b-4f74-803f-b726f3319da6","sortOrder":20},"sortOrder":20,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"83693822-b77d-425c-85bf-10b88630b805"}],"recentChangeFlags":null},{"id":"21b64e08-2de8-470e-a0f5-dfddbe75929f","uri":"https://collections.monash.edu/","name":"collections.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"99cd6c73-0c52-4adc-abc8-0ee72dcbfa67","sortOrder":20},"sortOrder":20,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"21b64e08-2de8-470e-a0f5-dfddbe75929f"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"21b64e08-2de8-470e-a0f5-dfddbe75929f"}],"recentChangeFlags":null},{"id":"23c4417b-ae3c-4935-aadf-2148e90f85b6","uri":"https://equella.monash.edu","name":"equella.monash.edu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"511104df-e872-4dd2-9709-58c4b62c48c0","sortOrder":21},"sortOrder":21,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"23c4417b-ae3c-4935-aadf-2148e90f85b6"}],"recentChangeFlags":null},{"id":"397cc3f4-c910-471a-ba6c-2eaae8763645","uri":"https://apps.apple.com/ky/app/m-space/id6761056432","name":"M-Space App iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7d959fec-d2b7-4eee-bf4c-14215b34ad9b","sortOrder":22},"sortOrder":22,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"397cc3f4-c910-471a-ba6c-2eaae8763645"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"397cc3f4-c910-471a-ba6c-2eaae8763645"}],"recentChangeFlags":null},{"id":"409578d8-b1a9-4269-8ac6-4e3d5887ab24","uri":"https://play.google.com/store/apps/details?id=com.monashuniversity.mspace.android\u0026pcampaignid=web_share","name":"M-Space App Android","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0e74238b-d95a-4985-a9a7-eb5141fecd83","sortOrder":23},"sortOrder":23,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"409578d8-b1a9-4269-8ac6-4e3d5887ab24"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"409578d8-b1a9-4269-8ac6-4e3d5887ab24"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"5a4634c4-bccd-4370-b4ed-ef70a56d696a","p1MaxCents":150000,"p1MinCents":100000,"p2MaxCents":120000,"p2MinCents":60000,"p3MaxCents":30000,"p3MinCents":15000,"p4MaxCents":5000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1000,"max":1500},"2":{"min":600,"max":1200},"3":{"min":150,"max":300},"4":{"min":50,"max":50},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"ee4f45f5-d91f-4a18-ba2a-316e330c3097","name":"API Target(s)","targets":[{"id":"d988d25a-fbfd-4b69-b9d0-9f182ebd47e0","uri":"","name":"mix-qat.monash.edu/*","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"302214fe-9e84-4e71-8053-3360b32a3a12","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"d988d25a-fbfd-4b69-b9d0-9f182ebd47e0"}],"recentChangeFlags":null},{"id":"1f7b77b7-fcf8-4d0e-8c04-097ec4055ad8","uri":"","name":"mix-dev.monash.edu/*","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"96c28733-d559-4dde-a507-5844e57bde9c","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"1f7b77b7-fcf8-4d0e-8c04-097ec4055ad8"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":{"id":"39278266-3a51-4106-9be5-9c75cd77c379","p1MaxCents":250000,"p1MinCents":210000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":2100,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"9261b74f-bee5-4423-9cf6-58049deaafaa","code":"monash-mbb","state":"in_progress","endsAt":null,"bountyId":"0d7ae3b1-440e-49b8-b9bf-add3eb81c1d4","startsAt":"2021-03-09T19:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Education","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/2ed0/d883/7d4017b2/7bcb5f32f98a914c8ace8590084f981d_Monash_logo.png","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2021-03-09T19:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/monash-mbb","changelogs":"/engagements/monash-mbb/changelog","submissions":null,"announcements":"/engagements/monash-mbb/announcements","hallOfFame":"/engagements/monash-mbb/hall_of_fames","crowdstream":"/engagements/monash-mbb/crowdstream"},"announcementsCount":24,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/monash-mbb/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=monash-mbb\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/monash-mbb/engagement_subscribers","engagementChangelogsUrl":"/engagements/monash-mbb/changelog","publishedAt":"2026-09-01T22:14:37.600Z","engagementChangelogUrl":"/engagements/monash-mbb/changelog/78091ed2-458c-4c85-ba6b-f585fd7c6d72","createUserFeedbacksUrl":"/engagements/monash-mbb/feedbacks","engagementCrowdstreamUrl":"/engagements/monash-mbb/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}