Skip to content

Information and link in README.md file related to Security issue reporting should be updated #22166

Closed
@sdzhepa

Description

@sdzhepa

Preconditions (*)

  1. the Readme on https://github.com/magento/magento2 still says to create Bugcrowd reports for security vulns. Since the program is taken down the link 404's
  2. Now in use HackerOne for these purposes

Steps to reproduce (*)

  1. Go to https://github.com/magento/magento2/blob/2.3-develop/README.md
  2. Scroll to "Reporting Security Issues" section

Expected result (*)

  1. Text and link should be updated and use "HackerOne" instead of "Bugcrowd "
    Example of Expected code/text
    ## Reporting Security Issues
    To report security vulnerabilities in Magento software or web sites, please create a HackerOne account [there](https://hackerone.com/magento) to submit and follow-up your issue. Learn more about reporting security issues [here](https://magento.com/security/reporting-magento-security-issue).

Actual result (*)

  1. Current text and link related to 'Bugcrowd researcher account there ' leads to 404 page
    Example of Actual code/text
    ## Reporting Security Issues
    To report security vulnerabilities in Magento software or web sites, please create a Bugcrowd researcher account [there](https://bugcrowd.com/magento) to submit and follow-up your issue. Learn more about reporting security issues [here](https://magento.com/security/reporting-magento-security-issue).

Metadata

Metadata

Assignees

Labels

Component: OtherFixed in 2.3.xThe issue has been fixed in 2.3 release lineIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedIssue: Format is validGate 1 Passed. Automatic verification of issue format passedIssue: Ready for WorkGate 4. Acknowledged. Issue is added to backlog and ready for developmentReproduced on 2.3.xThe issue has been reproduced on latest 2.3 releasegood first issue

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions