Magento Stack Exchange is a question and answer site for users of the Magento e-Commerce platform. It only takes a minute to sign up.
Sign up to join this community
Is the Magento 1 bug bounty still active? I've found a new obscure XSS vector that will allow attackers to take control of administrator sessions and would like to submit the procedure, yet I don't see the form on the Magento site anymore.
If the bounty isn't running anymore, that would be a bummer...and if that's the case, then what is the preferred method of contact?
Thanks!
According to the Magento Security Center the link for reporting security bugs links to https://bugcrowd.com/magento.
It seems they just moved the bug bounty programme to bugcrowd lately.
