Monash University Vulnerability Disclosure Program

Monash University is committed to protecting the confidentiality, integrity and availability of its information and digital platforms. Our Vulnerability Disclosure Program is designed to minimise the impact of potential security vulnerabilities. At Monash, we value and support the work undertaken by the security research community and appreciate it when researchers take the time to report potential security vulnerabilities to us.

Ratings:

For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.