{"id":"9641065e-1b8d-424e-b9f8-524390b242c7","engagementId":"ffca7b9a-ce33-4c5a-ab6b-375e2d4e84a5","data":{"brief":{"id":"29ecd7dd-88e7-4e6c-98ac-c7451a6c3f34","name":"State Farm VDP","tagline":"Large US Insurance Provider","description":"\u003ch2\u003eRatings:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":false,"additionalInformation":""},"scope":[{"id":"e17c6a8e-7f53-4be4-8665-cf66b868f5c8","name":"In scope","targets":[{"id":"214bf3d5-3a0e-4e7a-9970-46b89b9ff55b","uri":null,"name":"*statefarm.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b202160a-93ec-497e-84b9-5681b919b0ec","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"214bf3d5-3a0e-4e7a-9970-46b89b9ff55b"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"214bf3d5-3a0e-4e7a-9970-46b89b9ff55b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"214bf3d5-3a0e-4e7a-9970-46b89b9ff55b"}],"recentChangeFlags":null},{"id":"d9077a78-6ca7-4b3c-9b4a-06e3b71cdfee","uri":null,"name":"State Farm Drive Safe and Save Mobile Application (iOS)","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"acd9b77c-d249-4fcd-a458-cf79630550ae","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"d9077a78-6ca7-4b3c-9b4a-06e3b71cdfee"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"d9077a78-6ca7-4b3c-9b4a-06e3b71cdfee"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"d9077a78-6ca7-4b3c-9b4a-06e3b71cdfee"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"d9077a78-6ca7-4b3c-9b4a-06e3b71cdfee"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"d9077a78-6ca7-4b3c-9b4a-06e3b71cdfee"}],"recentChangeFlags":null},{"id":"89fc4908-1749-48b7-9cac-c4bffe2afe2d","uri":null,"name":"State Farm Drive Safe and Save Mobile Application (Android)","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"212a479d-75ca-4eb9-a2ec-04e27e81eb76","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"89fc4908-1749-48b7-9cac-c4bffe2afe2d"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"89fc4908-1749-48b7-9cac-c4bffe2afe2d"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"89fc4908-1749-48b7-9cac-c4bffe2afe2d"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"89fc4908-1749-48b7-9cac-c4bffe2afe2d"}],"recentChangeFlags":null},{"id":"ff752927-105f-432f-a227-7c3fc998fd45","uri":null,"name":"State Farm Steer Clear Mobile Application (iOS)","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"93caa648-3082-464e-bbd4-b107b856737d","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"ff752927-105f-432f-a227-7c3fc998fd45"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"ff752927-105f-432f-a227-7c3fc998fd45"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"ff752927-105f-432f-a227-7c3fc998fd45"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"ff752927-105f-432f-a227-7c3fc998fd45"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"ff752927-105f-432f-a227-7c3fc998fd45"}],"recentChangeFlags":null},{"id":"5ba890d2-a13f-4694-a312-6f8144e70c36","uri":null,"name":"State Farm Steer Clear Mobile Application (Android)","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a71fccfd-24a9-484b-9d90-e17863843c70","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"5ba890d2-a13f-4694-a312-6f8144e70c36"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"5ba890d2-a13f-4694-a312-6f8144e70c36"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"5ba890d2-a13f-4694-a312-6f8144e70c36"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"5ba890d2-a13f-4694-a312-6f8144e70c36"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"ffca7b9a-ce33-4c5a-ab6b-375e2d4e84a5","code":"statefarm-esf","state":"in_progress","endsAt":null,"bountyId":"e751c5a3-7b1a-4c2f-984a-e241241e8772","startsAt":"2019-12-02T00:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/b047/4da6/65ac44c1/ecb0061643e7982f1649a7b00038c205_statefarmlogo.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":false,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-01-21T19:02:22.215Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/statefarm-esf","changelogs":"/engagements/statefarm-esf/changelog","submissions":null,"announcements":"/engagements/statefarm-esf/announcements","hallOfFame":"/engagements/statefarm-esf/hall_of_fames","crowdstream":null},"announcementsCount":1,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"P1 24/7","submitReportUrl":"/engagements/statefarm-esf/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=statefarm-esf\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/statefarm-esf/engagement_subscribers","engagementChangelogsUrl":"/engagements/statefarm-esf/changelog","publishedAt":"2025-01-21T19:02:22.338Z","engagementChangelogUrl":"/engagements/statefarm-esf/changelog/9641065e-1b8d-424e-b9f8-524390b242c7","createUserFeedbacksUrl":"/engagements/statefarm-esf/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}