{"id":"404acb1a-eb4d-4fd9-9c00-ebbfce65d845","engagementId":"386651b6-c24a-42e0-9c93-d22d01358fc0","data":{"brief":{"id":"f050435b-58d3-4edf-aba1-5f24fded36ad","name":"Pinterest","tagline":"Discover ideas for any project or interest, hand-picked by people like you.","description":"\u003cp\u003ePinterest is a place to discover ideas for all your projects and interests, hand-picked by people like you. We take our security very seriously and welcome any responsible disclosure of potential gaps in our systems. Our triage team will use a combination of impact and exploitability to assess reported vulnerabilities, and reward decisions are at the sole discretion of Pinterest's security team.\u003c/p\u003e\n\n\u003cp\u003eThis program adheres to the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e for the prioritization of findings. \u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003ePlease note: Rewards caps are strict and non-negotiable\u003c/em\u003e\u003c/p\u003e","industryTagId":"0def401b-0941-4302-b6d6-5f49469b8ca5","targetsOverview":"\u003cp\u003eVulnerabilities reported on other Pinterest properties or applications not listed as 'In scope' are currently not eligible for monetary rewards (as they come into scope, they will be added to this section). However, they are still eligible for our \u003ca href=\"https://bugcrowd.com/pinterest/hall-of-fame\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHall of Fame\u003c/a\u003e. Unauthorized access to Pinterest Corporate systems will be evaluated case by case and may be eligible for monetary rewards.\u003c/p\u003e\n\n\u003ch2\u003eAreas of Interest\u003c/h2\u003e\n\n\u003cp\u003eThese vulnerability types and products are of particular interest and will be considered for top rewards:\u003c/p\u003e\n\n\u003ch3\u003eVulnerability types\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eRemote Code Execution\u003c/li\u003e\n\u003cli\u003eSignificant Authentication Bypass\u003c/li\u003e\n\u003cli\u003eCritical Authorization Bugs\u003c/li\u003e\n\u003cli\u003eCross Site Request Forgery on Critical Actions\u003c/li\u003e\n\u003cli\u003eCross Site Scripting (excluding self-XSS)\u003c/li\u003e\n\u003cli\u003eExfiltration of Sensitive Data or Personal Identifiable Information (PII)\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eProducts \u0026amp; Features\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://help.pinterest.com/en/article/make-your-profile-private\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePrivate Profiles\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://ads.pinterest.com/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePinterest Ads\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eOut of Scope\u003c/h2\u003e\n\n\u003cp\u003eOut of scope findings include (but are not limited to):\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eExternal authentication injection\u003c/li\u003e\n\u003cli\u003eNetwork/resource exhaustion attacks such as DDoS\u003c/li\u003e\n\u003cli\u003eRate limiting bypass without clear security impact\u003c/li\u003e\n\u003cli\u003eSocial engineering or spam\u003c/li\u003e\n\u003cli\u003eUse of a vulnerable library/service without demonstrable impact\u003c/li\u003e\n\u003cli\u003eOutput from automated tools/scanners\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eTesting Guidelines\u003c/h2\u003e\n\n\u003cp\u003eTesting is only authorized on the targets listed as In-Scope. Any domain/property of Pinterest not listed in the targets section is out of scope. This includes any/all subdomains not listed above.  IF you happen to identify a security vulnerability on a target that is not in-scope, but that demonstrably belongs to the Pinterest org, it may be reported to this program, and is appreciated - but will ultimately be marked as 'not applicable' and will not be eligible for monetary or points-based compensation.\u003c/p\u003e\n\n\u003cp\u003eOnly test/interact with your own accounts or those that you have explicit permission from the account owner. If you come across personal information of any accounts belonging to real users, cease any further testing and report the findings(including details of the exposed information). If we see continued testing from our side of vulnerabilities that expose real user personal information, we may disqualify the report. Any personal information exposed through testing must not be kept or disclosed, and should be cleared immediately.\u003c/p\u003e\n\n\u003ch3\u003eAPI Testing\u003c/h3\u003e\n\n\u003cp\u003eTo test certain APIs (e.g \u003ca href=\"https://developers.pinterest.com/docs/api/v5/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ePinterest v5 API\u003c/a\u003e), you'll need to create a business account and enroll as a developer. Once enrolled, you can create apps in the Developer platform. The process for this can be found at \u003ca href=\"https://developers.pinterest.com/account-setup/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://developers.pinterest.com/account-setup/\u003c/a\u003e. Please use your \u003ccode\u003e*@bugcrowdninja.com\u003c/code\u003e email in order for us to verify your participation in program and approve your apps quickly.\u003c/p\u003e\n\n\u003ch2\u003eSubmission Guidelines\u003c/h2\u003e\n\n\u003cp\u003eReports should include:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eContext\u003c/li\u003e\n\u003cli\u003eClear reproduction steps\u003c/li\u003e\n\u003cli\u003eImpact\u003c/li\u003e\n\u003cli\u003eScreenshots/videos\u003c/li\u003e\n\u003cli\u003eUser ID/email of accounts used during testing\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eAny reports not providing the critical submission information listed above may experience delayed response times and/or reduced rewards. Well-written and concise reports with clear demonstrable impact are likely to be triaged/validated faster, and may be rewarded with a larger payout.\u003c/p\u003e\n\n\u003cp\u003ePlease only submit one report per vulnerability(even if the issue appears on multiple endpoints or attack surfaces).\u003c/p\u003e\n\n\u003ch3\u003eEligibility and Responsible Disclosure\u003c/h3\u003e\n\n\u003cp\u003eWe are pleased to thank every researcher who submits valid reports that help us improve the security of Pinterest. However, only those that meet the following eligibility requirements may receive a reward: \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe vulnerability must be a qualifying vulnerability (see Scope)\u003c/li\u003e\n\u003cli\u003eYou must be first to submit the vulnerability\u003c/li\u003e\n\u003cli\u003eThe vulnerability's root cause is not already known\u003c/li\u003e\n\u003cli\u003eWe can’t be legally prohibited from rewarding you\u003c/li\u003e\n\u003cli\u003eYou may not publicly disclose the vulnerability without our explicit permission\u003c/li\u003e\n\u003cli\u003eNot be employed by Pinterest or its subsidiaries or related entities\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eTerms and Conditions\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eSubmitters must not access data except to the extent minimally required to identify a vulnerability; and that use of any data accessed must be limited to use for identifying and reporting the vulnerabilityYou must comply with all applicable laws in connection with your participation in this program.\u003c/li\u003e\n\u003cli\u003eAs a condition of participation in this program, you hereby grant Pinterest, its affiliates and customers a perpetual, irrevocable, worldwide, royalty-free, transferrable, sub-licensable (through multiple tiers) and non-exclusive license to use, reproduce, adapt, modify, publish, distribute, publicly perform, create a derivative work form, make, use, sell, offer for sale and import the Submission, as well as any materials submitted to Pinterest in connection therewith, for any purpose.\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003eAs well, this program is not an offer of employment, nor of a contractual relationship between Pinterest and any other party. You are also responsible for any applicable taxes associated with any reward you receive. We may modify the terms of this program or terminate this program at any time. We will not apply changes to this program retroactively.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eThis bounty requires explicit permission to disclose the results of a submission. The Pinterest team is open to coordinated disclosure requests for valid submissions that fall in the P1-P4 range.\u003c/h3\u003e\n\n\u003ch1\u003eSafe Harbor\u003c/h1\u003e\n\n\u003cp\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy; \u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls; \u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy;\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eYou are expected, as always, to comply with all applicable laws.\u003c/p\u003e\n\n\u003cp\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please submit a report through one of our official channels before going any further.\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"46a19e97-2cbe-4eae-a302-9555a06808ec","name":"in scope","targets":[{"id":"3c7f3b82-6576-4a9b-938d-146f7d344217","uri":"https://api.pinterest.com","name":"api.pinterest.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3a8a1000-75ce-4c6f-8ad6-94d4101013d9","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"3c7f3b82-6576-4a9b-938d-146f7d344217"},{"id":"a4603de0-3954-4611-9704-cebf3801dbf8","name":"Flask","targetId":"3c7f3b82-6576-4a9b-938d-146f7d344217"}],"recentChangeFlags":null},{"id":"bc58a53e-b228-4ed0-b069-1130e1093834","uri":null,"name":"*.pinterest.com Web Apps","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"72452bbb-8d99-48f3-90d5-7c11bb097a53","sortOrder":1},"sortOrder":1,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"bc58a53e-b228-4ed0-b069-1130e1093834"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"bc58a53e-b228-4ed0-b069-1130e1093834"}],"recentChangeFlags":null},{"id":"1f38e3a3-b5d6-4434-8acf-18443d08ce02","uri":"https://apps.apple.com/us/app/pinterest/id429047995","name":"Pinterest iOS Mobile Application","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5dc8d8d5-1a4d-4c82-b3b8-247d5620c21a","sortOrder":2},"sortOrder":2,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"1f38e3a3-b5d6-4434-8acf-18443d08ce02"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"1f38e3a3-b5d6-4434-8acf-18443d08ce02"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"1f38e3a3-b5d6-4434-8acf-18443d08ce02"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"1f38e3a3-b5d6-4434-8acf-18443d08ce02"}],"recentChangeFlags":null},{"id":"ce0e3385-a09f-4736-8f91-26fc47ea0210","uri":"https://play.google.com/store/apps/details?id=com.pinterest\u0026hl=en_US\u0026gl=US","name":"Pinterest Android Mobile Application","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5dcac820-7521-4285-a626-91aaec9c0d5e","sortOrder":3},"sortOrder":3,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"ce0e3385-a09f-4736-8f91-26fc47ea0210"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"ce0e3385-a09f-4736-8f91-26fc47ea0210"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"ce0e3385-a09f-4736-8f91-26fc47ea0210"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"ce0e3385-a09f-4736-8f91-26fc47ea0210"}],"recentChangeFlags":null},{"id":"9293314a-dca3-42d9-a615-ca1aa72f6c4c","uri":"https://play.google.com/store/apps/details?id=com.pinterest.twa\u0026hl=en_US\u0026gl=US","name":"Pinterest Lite Android Mobile Application","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a0f8422c-d7d3-4275-8fe5-a27679e7038f","sortOrder":4},"sortOrder":4,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"9293314a-dca3-42d9-a615-ca1aa72f6c4c"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"9293314a-dca3-42d9-a615-ca1aa72f6c4c"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"9293314a-dca3-42d9-a615-ca1aa72f6c4c"}],"recentChangeFlags":null},{"id":"76a5ae6d-5737-4863-9d75-a3f5c25b853a","uri":"https://chrome.google.com/webstore/detail/pinterest-save-button/gpdjojdkbbmdfjfahjcgigfpmkopogic?hl=en","name":"Chrome extension (download at: chrome.google.com/webstore/detail/pinterest-save-button/gpdjojdkbbmdfjfahjcgigfpmkopogic?hl=en)","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c8e06d52-4cc0-4198-9a91-4bfdd70888da","sortOrder":5},"sortOrder":5,"tags":[{"id":"59791207-9cf4-4498-b5e1-510fee95dc40","name":"Browser Extension","targetId":"76a5ae6d-5737-4863-9d75-a3f5c25b853a"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"76a5ae6d-5737-4863-9d75-a3f5c25b853a"}],"recentChangeFlags":null},{"id":"bbbc2eb7-5ab6-43a5-ac8d-cac25e6ec8a1","uri":"https://microsoftedge.microsoft.com/addons/detail/pinterest-save-button/bkgoflemacdadndiohhdnphcmdhacabg","name":"Edge extension (download at: https://microsoftedge.microsoft.com/addons/detail/pinterest-save-button/bkgoflemacdadndiohhdnphcmdhacabg)","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fcb95f15-90e4-4512-af7d-da69d02075ba","sortOrder":6},"sortOrder":6,"tags":[{"id":"59791207-9cf4-4498-b5e1-510fee95dc40","name":"Browser Extension","targetId":"bbbc2eb7-5ab6-43a5-ac8d-cac25e6ec8a1"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"bbbc2eb7-5ab6-43a5-ac8d-cac25e6ec8a1"}],"recentChangeFlags":null},{"id":"c47989b7-2f05-458e-bc72-c7e4d5c5c0d1","uri":"https://addons.mozilla.org/en-US/firefox/addon/pinterest/","name":"Firefox extension (download at:   https://addons.mozilla.org/firefox/addon/pinterest/)","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"54cb0576-2dfd-4dcc-9519-08f0a6af85c2","sortOrder":7},"sortOrder":7,"tags":[{"id":"59791207-9cf4-4498-b5e1-510fee95dc40","name":"Browser Extension","targetId":"c47989b7-2f05-458e-bc72-c7e4d5c5c0d1"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"c47989b7-2f05-458e-bc72-c7e4d5c5c0d1"}],"recentChangeFlags":null},{"id":"0cd03855-bccf-4f4a-a259-c26b91fbda30","uri":"https://apps.apple.com/us/app/save-to-pinterest/id6473649042","name":"Safari extension (download at: https://apps.apple.com/us/app/save-to-pinterest/id6473649042)","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4efd329a-e346-4cf9-b312-cbef2233959f","sortOrder":8},"sortOrder":8,"tags":[{"id":"59791207-9cf4-4498-b5e1-510fee95dc40","name":"Browser Extension","targetId":"0cd03855-bccf-4f4a-a259-c26b91fbda30"},{"id":"fbcf3656-e6af-403a-a14e-6ec830fb8668","name":"Javascript","targetId":"0cd03855-bccf-4f4a-a259-c26b91fbda30"}],"recentChangeFlags":null},{"id":"98563b40-0569-466a-b13a-0d12ec376233","uri":"https://github.com/pinterest/","name":"Open source projects(non-forked) listed at github.com/pinterest/","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3d9bace2-3f7d-44b8-a84a-9d278684b5ea","sortOrder":9},"sortOrder":9,"tags":[{"id":"d58504e3-97f9-45ef-95aa-4a413a07190c","name":"Static Code Analysis","targetId":"98563b40-0569-466a-b13a-0d12ec376233"}],"recentChangeFlags":null},{"id":"57aed944-1087-4551-9350-1f7974c7dae1","uri":"https://www.shffls.com","name":"https://www.shffls.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"adde7e4a-3cf3-4cfe-a1b7-a127b6cdb50e","sortOrder":10},"sortOrder":10,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"57aed944-1087-4551-9350-1f7974c7dae1"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57aed944-1087-4551-9350-1f7974c7dae1"}],"recentChangeFlags":null},{"id":"f405e3cd-8711-4077-8389-7051303431c3","uri":"https://play.google.com/store/apps/details?id=com.pinterest.shuffles","name":"Shuffles App for Android","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ca57d6fc-197e-43cb-8905-e9cc17e6ec37","sortOrder":11},"sortOrder":11,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"f405e3cd-8711-4077-8389-7051303431c3"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"f405e3cd-8711-4077-8389-7051303431c3"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"f405e3cd-8711-4077-8389-7051303431c3"}],"recentChangeFlags":null},{"id":"de476fb5-8941-4c51-9cf1-68890def9351","uri":"https://apps.apple.com/us/app/shuffles-by-pinterest/id1573869498","name":"Shuffles App for iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a21e2f56-63c1-4733-b549-48c96d253ab9","sortOrder":12},"sortOrder":12,"tags":[{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"de476fb5-8941-4c51-9cf1-68890def9351"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"de476fb5-8941-4c51-9cf1-68890def9351"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"de476fb5-8941-4c51-9cf1-68890def9351"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"3d204daa-71ab-4a3d-914a-dcb5b08b2eef","p1MaxCents":2500000,"p1MinCents":1000000,"p2MaxCents":800000,"p2MinCents":500000,"p3MaxCents":300000,"p3MinCents":100000,"p4MaxCents":50000,"p4MinCents":20000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":10000,"max":25000},"2":{"min":5000,"max":8000},"3":{"min":1000,"max":3000},"4":{"min":200,"max":500},"5":{"min":null,"max":null}},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"386651b6-c24a-42e0-9c93-d22d01358fc0","code":"pinterest","state":"in_progress","endsAt":null,"bountyId":"7aa516c2-13c2-429e-be2e-0db7a857cf30","startsAt":"2015-08-01T00:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Media","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/9cbb/3d6c/8a2f4ae1/08821bdd27acd21bbdda328e9ae7b939_3e77fd82e5fb782e4730615b2eccb53a_unnamed.png","logoBackgroundColor":"#BB0F23","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2015-08-01T00:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/pinterest","changelogs":"/engagements/pinterest/changelog","submissions":null,"announcements":"/engagements/pinterest/announcements","hallOfFame":"/engagements/pinterest/hall_of_fames","crowdstream":"/engagements/pinterest/crowdstream"},"announcementsCount":13,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/pinterest/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=pinterest\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/pinterest/engagement_subscribers","engagementChangelogsUrl":"/engagements/pinterest/changelog","publishedAt":"2025-11-04T14:51:44.478Z","engagementChangelogUrl":"/engagements/pinterest/changelog/404acb1a-eb4d-4fd9-9c00-ebbfce65d845","createUserFeedbacksUrl":"/engagements/pinterest/feedbacks","engagementCrowdstreamUrl":"/engagements/pinterest/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}