OpenBugBounty.org > Bug Bounty List > Creative Commons Bug Bounty Program

Creative Commons Bug Bounty Program

Creative Commons runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Creative Commons

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Creative Commons and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

creativecommons.org

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

• Provide reports in English
• Estimate the severity of the issue

Testing Requirements:

• Document how to reproduce the issue
• Document the current failure (insecure) result/outcome
• Document the anticipated success (post fix) result/outcome

Possible Awards:

• Blog post collaboration or guest submission: https://opensource.creativecommons.org/blog/entries/
• Gratitude expressed via Twitter: https://twitter.com/cc_opensource

Special Notes:

Our apologies for our limited language support. Thank you for your time and effort!

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

23 March, 2023

soela_cs:

He's a reliable partner in finding and fixing some security issues on our website, and I'm happy to recommend working with him. Thanks for the collaboration!

22 March, 2023

TimFenner7:

On behalf of LeaseQuery, I wish to extend our gratitude to 4N_CURZE for reporting a vulnerability found on our website. 4N_CURZE was quick to respond and gladly provided all the information he could in order to help mitigate the risk. His efforts to make the internet a safer place is greatly appreciated!

17 March, 2023

pagecp31:

Huge thanks to Rajesh for pointing out an XSS vulnerability that affected several pages in the website I am developing on my free time. It is much appreciated and the report was very clear!

17 March, 2023

travelfish:

Thanks for finding the issuing, passing on your find, and the quick reply. Cheers!

15 March, 2023

MrMoney84315336:

Thank you for reporting the issues, good work.


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.