nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Where to report a security vulnerability

skoza

Hi!

I have found a security vulnerability in Alfresco. I want to report it. I found the VDP pdf file (https://security.hyland.com/?itemUid=a26c76c4-6568-4a97-a75b-5cc628e0a407&source=click) and it states that:

"Hyland utilizes HackerOne to as a provider for our Vulnerability Disclosure Program."

Yet I cant find any program belonging to Hyland in HackerOne. There is one named "Alfresco" (https://hackerone.com/alfresco?type=team) but it seems outdated.
Is the information provided in VDP pdf still relevant? If so, could you provide me a link to your HackerOne program?

Find more posts tagged with

Alfresco Content Services

Comments

angelborroy

You can summit your vulnerability to HackerOne, it's the official channel. There is no "program" in the directory but you are still able to make it.

skoza

Hi!
Thanks for the quick reply. Unfortunately I have no idea how to submit a report to hackerone without a program. Could you send me a link where I can make a submission?

Thanks a lot!