Magento Bug Bounty - New Admin XSS Vulnerability

Question

Is the Magento 1 bug bounty still active? I've found a new obscure XSS vector that will allow attackers to take control of administrator sessions and would like to submit the procedure, yet I don't see the form on the Magento site anymore.

If the bounty isn't running anymore, that would be a bummer...and if that's the case, then what is the preferred method of contact?

Thanks!

Answer 1

According to the Magento Security Center the link for reporting security bugs links to https://bugcrowd.com/magento.

It seems they just moved the bug bounty programme to bugcrowd lately.