31,003
edits
Security information: Difference between revisions
Jump to navigation
Jump to search
m
→File:art.png Bug Bounty and VDP Campaigns
Tag: 2017 source edit |
Tag: 2017 source edit |
||
| Line 149: | Line 149: | ||
=[[File:art.png]] Bug Bounty and VDP Campaigns= | =[[File:art.png]] Bug Bounty and VDP Campaigns= | ||
Bug bounty campaigns are regularly conducted by the project and funded by the Dolibarr Association. These campaigns are private VDP (Vulnerability Disclosure Programs) managed by specialized partners (Examples: https://yogosha.com, https://huntr.com/). | Bug bounty campaigns are regularly conducted by the project and funded by the Dolibarr Association. These campaigns are private VDP (Vulnerability Disclosure Programs) managed by specialized partners (Examples: https://yogosha.com, https://huntr.com/). | ||
Fixes from these campaigns are published within 15 days, as with any other public vulnerability report (this is the timeframe observed by the community project; contact a Dolibarr Preferred Partner if you require a longer contractual timeframe). | Fixes from these campaigns are published within 15 days, as with any other public vulnerability report (this is the timeframe observed by the community project; contact a Dolibarr Preferred Partner if you require a longer contractual timeframe). | ||