{"id":"52d56575-2cb1-4d86-8988-d5d30b7000c2","engagementId":"438ccdc8-bae3-4ae7-8860-7ad21aceef70","data":{"brief":{"id":"348b57c0-1de1-478e-8324-f44e03cfbd19","name":"Quizlet","tagline":"Simple tools for learning anything. Improve your grades by studying with flashcards, games and more.","description":"\u003cp\u003eQuizlet is the world's largest student and teacher online learning community. Every month, over 30 million active learners from 130 countries practice and master more than 200 million study sets of content on every conceivable subject and topic. Our mission is simple: To help students (and their teachers) practice and master whatever they are learning. Quizlet provides engaging, customizable activities with contributions from people everywhere.\u003c/p\u003e\n\n\u003cp\u003eQuizlet invites you to test and help secure our primary publicly facing assets—focusing on our web, mobile, and API applications. We appreciate your efforts and hard work in making the internet (and Quizlet) more secure and look forward to working with the researcher community to create a meaningful and successful bug bounty program. Good luck and happy hunting!\u003c/p\u003e\n\n\u003cp\u003ePlease note: Quizlet is an educational platform, not an assessment platform for cheating or academic dishonesty. As such, submissions related to cheating mechanisms within our gaming features, testing functionality, or attempts to manipulate user interactions to gain an unfair advantage will not be considered in scope. Similarly, issues such as rate limiting, scraping of publicly available content, or automation concerns are out of scope unless they directly pertain to accessing or exploiting premium content or introduce a significant security impact.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eRewards/Ratings\u003c/h3\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"f2d64fa8-5daf-49ef-8de8-edc7da2dfb4a","targetsOverview":"\u003cp\u003e\u003cem\u003eAny domain/property of Quizlet not listed in the targets section is out of scope. This includes any/all subdomains not listed above.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eCredentials\u003c/h2\u003e\n\n\u003cp\u003ePlease self sign up at \u003ca href=\"https://quizlet.com/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://quizlet.com/\u003c/a\u003e for a free user account. You can request accounts at Plus and Teacher privilege levels by creating a support ticket with \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e. Please make sure to read more about the various privileges in the Role Information section.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRole Information\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eUnder the free user role, you have the ability to create classes (Private only please) within the Bugcrowd University School and can create any sets you want within that class. Please limit the view to \"Only Me\" as seen in this screenshot: \u003cspan class=\"rp-resources__download-link bc-m-0 bc-icon bc-icon--after cc-icon--download\" data-tooltip-id=\"a3cadd04-c95b-4097-aa61-70c201f940fd\"\u003e\u003ca href=\"https://bugcrowd.com/engagements/quizlet/attachments/a3cadd04-c95b-4097-aa61-70c201f940fd\" download\u003eHere\u003c/a\u003e\u003c/span\u003e\n\u003c/li\u003e\n\u003cli\u003eYou also have the ability to create Diagrams, but please limit these just like above\u003c/li\u003e\n\u003cli\u003eGo - Ad-free studying, Flashcards themes, Night Theme, offline access on the apps\u003c/li\u003e\n\u003cli\u003ePlus - Ad-free studying, upload your own images to sets, record custom audio, create or join as many classes as you want, study with Long-Term Learning, advanced diagram set creation tools, offline access on the apps, Night Theme\u003c/li\u003e\n\u003cli\u003eTeacher - Ad-free studying for students on sets you create, track student study activity with Class Progress, upload your own images to sets, record custom audio, customize games of Quizlet Live, create as many classes as you need, advanced diagram set creation tools, offline access on the apps, Night Theme\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eDenial of Service attacks\u003c/li\u003e\n\u003cli\u003eAnything that impacts the service or other users. Essentially, be not seen or heard by users of the site and stay within your own sandbox areas.\u003c/li\u003e\n\u003cli\u003eContact or feedback forms\u003c/li\u003e\n\u003cli\u003eAnything not included in https://*.quizlet.com\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eThere is a specific school called \"Bugcrowd University\" that should be used for creating data on Quizlet. Creating entries outside of this school, or creating non-private classes constitutes as impacting other users.\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"6de63542-ff05-4fe0-9dd6-683c1aed2d27","name":"In Scope","targets":[{"id":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966","uri":null,"name":"https://*.quizlet.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d46a0df4-6e54-43ca-8db7-49fc6ac0a943","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"3d0125f6-ca7c-42bf-be0e-ad8fed63bc85","name":"Algolia","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"515aada9-3b1a-4e38-a3f2-a9abd77feb0b","name":"Apache Kafka","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"57e2e51c-d2d6-4565-a952-15274307191f","name":"Braintree","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"7d52937f-3646-443c-850e-0582ed0e6531","name":"Google Cloud Storage","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6c6bee0b-5f69-4005-a5bd-7f2d81b37966"}],"recentChangeFlags":null},{"id":"3a4f5121-d56e-4244-8404-2fc88bff75e1","uri":"https://itunes.apple.com/us/app/quizlet-flashcards/id546473125","name":"Quizlet iOS App","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6280d4e0-3267-48ba-9e3f-75bfdea6fa4b","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"3a4f5121-d56e-4244-8404-2fc88bff75e1"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"3a4f5121-d56e-4244-8404-2fc88bff75e1"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"3a4f5121-d56e-4244-8404-2fc88bff75e1"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"3a4f5121-d56e-4244-8404-2fc88bff75e1"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"3a4f5121-d56e-4244-8404-2fc88bff75e1"}],"recentChangeFlags":null},{"id":"0e79da0d-a691-4f67-8ffa-74a41f03b2e2","uri":"https://play.google.com/store/apps/details?id=com.quizlet.quizletandroid","name":"Quizlet Android App","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8b5e930b-2383-4497-8cf7-ea017e672144","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"0e79da0d-a691-4f67-8ffa-74a41f03b2e2"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"0e79da0d-a691-4f67-8ffa-74a41f03b2e2"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"0e79da0d-a691-4f67-8ffa-74a41f03b2e2"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"0e79da0d-a691-4f67-8ffa-74a41f03b2e2"}],"recentChangeFlags":null},{"id":"9d418526-82e3-4a32-9794-920081b7d837","uri":null,"name":"3.0 API","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7a81e123-c6d9-47ee-9d55-eebbbd1ac139","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"9d418526-82e3-4a32-9794-920081b7d837"},{"id":"cbf0ee58-c41b-4dee-9d08-cefd01f5d7d6","name":"HTTP","targetId":"9d418526-82e3-4a32-9794-920081b7d837"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"6c753dae-b9a2-466e-96ac-b864694d32be","p1MaxCents":200000,"p1MinCents":150000,"p2MaxCents":125000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":45000,"p4MaxCents":20000,"p4MinCents":15000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":500000},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1500,"max":2000},"2":{"min":1000,"max":1250},"3":{"min":450,"max":600},"4":{"min":150,"max":200},"5":{"min":null,"max":null},"programMax":5000},"recentChangeFlags":null},{"id":"eb2e0ee8-0e1d-4c16-9303-1bcf2ad8ab34","name":"Out of Scope","targets":[{"id":"2c3d94f8-595a-4948-be53-791c3ba69360","uri":null,"name":"api.quizlet.com/2.0","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e085d45c-13af-4c53-b542-2b090f033030","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"2c3d94f8-595a-4948-be53-791c3ba69360"},{"id":"cbf0ee58-c41b-4dee-9d08-cefd01f5d7d6","name":"HTTP","targetId":"2c3d94f8-595a-4948-be53-791c3ba69360"}],"recentChangeFlags":null},{"id":"3a44e248-d6cc-437c-8e4e-d09cf5f7ba6a","uri":"","name":" help.quizlet.com (zendesk)","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e1ddcbbb-cd1e-4122-afb6-a1ea948b588c","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b237d173-d2ce-4c06-8dc7-8a4df99e8744","uri":"","name":"get.quizlet.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d335466c-5fc6-455e-8888-0b0ad90e4fc7","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"2f18b341-e295-4fe5-8109-b4e0b88ef176","attachmentPath":"https://bugcrowd.com/engagements/quizlet/attachments/2f18b341-e295-4fe5-8109-b4e0b88ef176","name":"API 3.5 Documentation _ Quizlet.pdf","filename":"API 3.5 Documentation _ Quizlet.pdf","description":"API documentation for the most updated 3.X API","icon":"fileOther","size":2702451,"sizeLabel":"2.58 MB","uploadedAt":"28 Aug 2024","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/quizlet/attachments/2f18b341-e295-4fe5-8109-b4e0b88ef176"},{"id":"a3cadd04-c95b-4097-aa61-70c201f940fd","attachmentPath":"https://bugcrowd.com/engagements/quizlet/attachments/a3cadd04-c95b-4097-aa61-70c201f940fd","name":"Set%20Permissions.png","filename":"Set%20Permissions.png","description":null,"icon":"fileImage","size":27369,"sizeLabel":"26.7 KB","uploadedAt":"13 Oct 2025","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/quizlet/attachments/a3cadd04-c95b-4097-aa61-70c201f940fd"}],"engagement":{"id":"438ccdc8-bae3-4ae7-8860-7ad21aceef70","code":"quizlet","state":"in_progress","endsAt":null,"bountyId":"e1934cbf-2e3a-4405-8063-b3262040bc29","startsAt":"2018-08-14T18:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Education","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/373c/7b28/1193eab4/a964e552d246410f1d528d9dfbff6045_quizlet-155fcff7.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2018-08-14T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/quizlet","changelogs":"/engagements/quizlet/changelog","submissions":null,"announcements":"/engagements/quizlet/announcements","hallOfFame":"/engagements/quizlet/hall_of_fames","crowdstream":null},"announcementsCount":9,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/quizlet/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=quizlet\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/quizlet/engagement_subscribers","engagementChangelogsUrl":"/engagements/quizlet/changelog","publishedAt":"2025-10-13T20:28:10.156Z","engagementChangelogUrl":"/engagements/quizlet/changelog/52d56575-2cb1-4d86-8988-d5d30b7000c2","createUserFeedbacksUrl":"/engagements/quizlet/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}