Flipdish Bug Bounty Report

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

Please make sure to review all terms at https://www.flipdish.com/security and pay careful note to the fact that you may only have one active submission at a time.

Which of the following best describes this issue? *

If the option is "other", be aware that this issue may not be eligible for a reward.

It allows unauthorised reading/writing of personal information, as is defined by GDPR of accounts other than your own

It allows unauthorised changing of data that is publicly accessible

It allows unauthorised changing of data that would affect the availability of our services

Other:

Which domain does this bug affect? *

Please note that only portal.flipdish.com and app.flipdish.com issues are eligible for a reward.

developers.flipdish.com

app.flipdish.com

academy.flipdish.com

Other:

Does this vulnerability depend on an iteration attack? *

Please note that iteration attacks are not eligible for a reward (however, please do inform us if you find one!)

Yes

Does this vulnerability need access to a customer's physical device?

Issues which require access to a customer's physical device are not eligible for a reward.

Yes

Clear selection

Please describe your vulnerability in as much detail as possible *

Note: This field supports multiple lines of text.

Please provide links to any images which help demonstrate your issue

Please provide links to any videos which help demonstrate your issue *

All submissions must include a video demonstrating the vulnerability

Clear form

Never submit passwords through Google Forms.

This form was created inside of Flipdish. Report Abuse

Forms