awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 11:27:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

update program

Browse Source
This commit is contained in:
Maidul Islam
2025-05-29 14:32:14 -04:00
committed by GitHub
parent 98e79207cc
commit fe237fbf4a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/internals/bug-bounty.mdx
+1 -1
View File
@@ -27,7 +27,7 @@ Bounties are based on severity, impact, and exploitability, as well as whether t
| --- | --- | --- | | --- | --- | --- |
| **Critical** | Full unauthorized access to secrets, authentication bypass, cross-tenant access, RCE, full compromise, etc | $2,000 - $5,000 | | **Critical** | Full unauthorized access to secrets, authentication bypass, cross-tenant access, RCE, full compromise, etc | $2,000 - $5,000 |
| **High** | Privilege escalation, project-level access without authorization, persistent DoS | $750 - $2,000 | | **High** | Privilege escalation, project-level access without authorization, persistent DoS | $750 - $2,000 |
| **Medium** | Info disclosure, scoped DoS (e.g. ReDoS with auth), or minor access control issues | $250 - $1,000 | | **Medium** | Info disclosure, scoped DoS (e.g. ReDoS with auth), or minor access control issues | $100 - $1,000 |
| **Low / Informational** | Missing headers, CSP warnings, theoretical flaws, self-hosting misconfigurations | Recognition only | | **Low / Informational** | Missing headers, CSP warnings, theoretical flaws, self-hosting misconfigurations | Recognition only |