Responsible Disclosure Report Form

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

WeTravel Inc.

Your Name *

Your Email *

Your Phone Number

Your Mailing Address

Your Website

Title

[Short and descriptive title of the bug]

Date Discovered

[Date when the bug was discovered]

YYYY

Vulnerability Type
*

Cross-Site Scripting (XSS)

SQL Injection

Cross-Site Request Forgery

Authentication Issues

Privilege Escalation

Remote Code Execution

Payment Bugs

Sensitive Data Leakage

HTML Injection

Security Miss-configuration

Other:

Description

[Detailed description of the bug, including steps to reproduce]

Proof of Concept

[Provide any code or steps that demonstrate the vulnerability]

Impact

[Explain the potential impact of the bug if exploited]

Recommendation for Fix

[If you have a suggestion for fixing the issue]

Terms and Conditions
*

By submitting this report, I acknowledge that I am adhering to WeTravel's responsible disclosure guidelines and do not engaging in any malicious activities.

I agree to collaborate and provide further information if requested by the organization's security team.

Required

Responsible Disclosure programs typically evaluate each reported vulnerability individually and assign a bounty based on factors such as

Severity: How severe is the impact of the vulnerability? A higher-severity bug would likely be awarded a higher bounty.
Exploitability: How easy is it to exploit the vulnerability? If it's relatively simple to exploit, the bounty might be higher.
Risk: What kind of data or functionality is at risk due to the vulnerability? Vulnerabilities that expose sensitive information or critical functions tend to receive higher bounties.
Quality of Report: A well-documented report with clear steps to reproduce and detailed impact analysis could be awarded a higher bounty.
Originality: If the vulnerability is unique and hasn't been previously reported, it might lead to a higher bounty.
Policy and Program: Each bug bounty program has its own policies and guidelines for assigning bounties

Submit

Clear form

Never submit passwords through Google Forms.

This form was created inside of WeTravel. Report Abuse

Forms