— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Redis VDP.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"average_time_to_first_program_response": 22,
"average_time_to_report_resolved": 1256,
"handle": "redis-vdp",
"id": 0,
"managed_program": true,
"name": "Redis VDP",
"offers_bounties": false,
"offers_swag": false,
"response_efficiency_percentage": 75,
"submission_state": "open",
"url": "https://hackerone.com/redis-vdp",
"website": "http://redis.io",
"targets": {
"in_scope": [
{
"asset_identifier": "Redis Community Edition",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Redis Open Source Software (Redis OSS) or Redis Community Edition\n\nSource code can be found at: \nhttps://github.com/redis/redis/\n\nProduct documentation at: \nhttps://redis.io/docs/latest/operate/oss_and_stack/\n\nPlease take special note of the security section of the documentation: \nhttps://redis.io/docs/latest/operate/oss_and_stack/management/security/\n\nPlease perform all testing on the most recent GA version or in-support GA version of Redis only. For each submission, please identify which installation method you have chosen (eg, Docker, binaries).\n\nRedis is primarily tested on modern Linux distributions, using contemporary Intel and AMD x86_64 CPUs, as well as ARM-based CPUs, and recent versions of the GCC compiler. Vulnerability reports that rely on unsupported or uncommon environments (for example, 32-bit architectures, non-Linux operating systems, or outdated toolchains) may be considered out of scope, even if the issue is technically valid. Such reports will be evaluated on a case-by-case basis at our discretion.\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "Redis Insight",
"asset_type": "DOWNLOADABLE_EXECUTABLES",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "api.redislabs.com",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "app.redislabs.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "http://cloud.redis.io",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "redis.io",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "www.redis.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "www.redislabs.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": []
}
}Redis Community Edition· criticalRedis Insight· critical— none listed —