31,003
edits
Security information: Difference between revisions
Jump to navigation
Jump to search
m
→File:art.png Report a security vulnerability
Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 147: | Line 147: | ||
=[[File:art.png]] Bug Bounty and VDP Campaigns= | |||
Bug bounty campaigns are regularly conducted by the project and funded by the Dolibarr Association. These campaigns are private VDP (Vulnerability Disclosure Programs) managed by specialized partners (Examples: https://yogosha.com, https://huntr.com/). Fixes from these campaigns are published within 15 days, as with any other public vulnerability report (this is the timeframe observed by the community project; contact a Dolibarr Preferred Partner if you require a longer contractual timeframe). | |||
---- | ---- | ||
<sup>(*X)</sup> This solution is part of protection used to solve vulnerabilities classified by the [http://www.owasp.org/index.php/Top_10_2007 OWASP Top Ten 2007] at range number X. Value for position X may have been changed since. | <sup>(*X)</sup> This solution is part of protection used to solve vulnerabilities classified by the [http://www.owasp.org/index.php/Top_10_2007 OWASP Top Ten 2007] at range number X. Value for position X may have been changed since. | ||