Atlassian uses cookies to improve your browsing experience, perform analytics and research, and conduct advertising. Accept all cookies to indicate that you agree to our use of cookies on your device.
Atlassian uses cookies to improve your browsing experience, perform analytics and research, and conduct advertising. Accept all cookies to indicate that you agree to our use of cookies on your device. Atlassian cookies and tracking notice, (opens new window)
Found a weakness in one of our systems? We want to hear about it. Cleverbase is a qualified trust service provider, and the security of what we build matters to the people who rely on it.
Use one of the options below. You will get a reference number straight away, and our assessment within five business days. You can follow the status of your report here at any time.
This connection is encrypted, so you do not need to encrypt your report yourself. Please leave out personal data of other people; describing how you reached it is enough.
Our full policy, including what is in and out of scope and what we promise you, is at cleverbase.com/en/legal/vulnerability-disclosure. We do not pay bug bounties, but we do credit you publicly once the issue is fixed.
Prefer email? disclosure@cleverbase.atlassian.net reaches the same team.
Required fields are marked with an asterisk*
{"xsrfToken":"805fd5c98fa97494c5214492fddc79ce55cb316b_lout","branding":{"id":"20","key":"rd","name":"Vulnerability disclosure","portalBaseUrl":"/servicedesk/customer/portal/20"},"helpCenterBranding":{"logoUrl":"https://api.media.atlassian.com/file/ab6a5389-d614-4a54-8434-998908081843/image/cdn?token=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJlNmJkYzllZi02YWI2LTRlMDctYjNiMi1iNzkzYWI5N2NkYTQiLCJhY2Nlc3MiOnsidXJuOmZpbGVzdG9yZTpmaWxlOmFiNmE1Mzg5LWQ2MTQtNGE1NC04NDM0LTk5ODkwODA4MTg0MyI6WyJyZWFkIl19LCJleHAiOjE3OTEyNTM2MzIsIm5iZiI6MTc5MTI1MzAzMn0.rw8_F63ZblUuYGeVrF6eKO1VtClaY49EW03RLN51dMw&client=e6bdc9ef-6ab6-4e07-b3b2-b793ab97cda4&mode=fit","logoId":"ab6a5389-d614-4a54-8434-998908081843","isLogoAvailable":true,"helpCenterTitle":"Welcome to the Cleverbase help center","sharedPortalName":"Cleverbase help center","userInitialAnnouncementHeader":"","userInitialAnnouncementMessageWiki":"","translations":{"en-US":{"helpCenterTitle":"Welcome to the Cleverbase help center","sharedPortalName":"Cleverbase help center","localeDisplayName":"English (United States)"}},"canEditAnnouncement":false,"siteDefaultLanguageTag":"en-US","userLanguageTag":"en-US","portalThemeColor":"#163563","helpCenterTitleColor":"#faf5eb","bannerMediaApiUrl":"https://api.media.atlassian.com/file//image/cdn?token=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJlNmJkYzllZi02YWI2LTRlMDctYjNiMi1iNzkzYWI5N2NkYTQiLCJhY2Nlc3MiOnsidXJuOmZpbGVzdG9yZTpmaWxlOiI6WyJyZWFkIl19LCJleHAiOjE3OTEyNTM2MzIsIm5iZiI6MTc5MTI1MzAzMn0.qStcKXBnOvPcPO5Sr7IwKklPBJY1cOBT9qKVKowOpno&client=e6bdc9ef-6ab6-4e07-b3b2-b793ab97cda4&height=300&mode=fit","bannerMediaApiFileId":"","useDefaultBanner":false,"isBannerAvailable":true,"topBarColor":"#faf5eb","topBarTextColor":"#23231f","hasTopBarBeenSplit":true},"portal":{"id":"20","key":"rd","projectId":10469,"serviceDeskId":20,"name":"Vulnerability disclosure","description":"<p>Report a security vulnerability</p>","portalBaseUrl":"/servicedesk/customer/portal/20","onlyPortal":false,"reqTypes":[{"id":"10801","name":"Report a vulnerability","descriptionHtml":"<p>Found a weakness in one of our systems? We want to hear about it. Cleverbase is a qualified trust service provider, and the security of what we build matters to the people who rely on it.</p>\n<p>Use one of the options below. You will get a reference number straight away, and our assessment within five business days. You can follow the status of your report here at any time.</p>\n<p>This connection is encrypted, so you do not need to encrypt your report yourself. Please leave out personal data of other people; describing how you reached it is enough.</p>\n<p>Our full policy, including what is in and out of scope and what we promise you, is at cleverbase.com/en/legal/vulnerability-disclosure. We do not pay bug bounties, but we do credit you publicly once the issue is fixed.</p>\n<p>Prefer email? disclosure@cleverbase.atlassian.net reaches the same team.</p>","callToAction":"Report a vulnerability","introHtml":"<p>Report a security vulnerability</p>","icon":10303,"iconUrl":"https://cleverbase.atlassian.net/rest/servicedeskapi/requesttype/icon/type/issuetype/id/10303","groups":[75],"key":""}],"reqGroups":[{"id":75,"name":"General"}],"orderMapping":{"75":[10801]},"kbs":{"kbEnabled":false,"serviceDeskId":-1},"createPermission":true,"portalAnnouncement":{"portalId":20,"canEditAnnouncement":false,"canAdministerProject":false,"portalProjectKey":"VD","userLanguageHeader":"","userLanguageMessageWiki":"","defaultLanguageHeader":"","defaultLanguageMessage":"","defaultLanguageDisplayName":"English (United States)","isUsingLanguageSupport":false,"translations":{}},"canViewCreateRequestForm":true,"isProjectSimplified":true,"mediaApiUploadInformation":{"token":"eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJlNmJkYzllZi02YWI2LTRlMDctYjNiMi1iNzkzYWI5N2NkYTQiLCJhY2Nlc3MiOnsidXJuOmZpbGVzdG9yZTp1cGxvYWQ6KiI6WyJyZWFkIiwiY3JlYXRlIiwidXBkYXRlIl0sInVybjpmaWxlc3RvcmU6Y2h1bms6KiI6WyJyZWFkIiwiY3JlYXRlIl0sInVybjpmaWxlc3RvcmU6Y29sbGVjdGlvbjp1cGxvYWQtdXNlci1jb2xsZWN0aW9uLS0xNTEyOTQ0ODMzIjpbInJlYWQiLCJjcmVhdGUiLCJ1cGRhdGUiXX0sImV4cCI6MTc5MTI1NDIzMiwibmJmIjoxNzkxMjUzMDMyLCJhbm9uSWQiOiJhbm9uLXVzZXIiLCJodHRwczovL2lkLmF0bGFzc2lhbi5jb20vYXBwQWNjcmVkaXRlZCI6ZmFsc2V9.0vNMo8ZjfeYPg7ESBes0q9IVh1aoOGL_A0fX6tzS1dE","targetCollection":"upload-user-collection--1512944833","endpointUrl":"https://api.media.atlassian.com","clientId":"e6bdc9ef-6ab6-4e07-b3b2-b793ab97cda4","tokenDurationInMins":20},"locale":"en-US","i18nTranslations":{}},"reqCreate":{"id":10801,"projectId":10469,"issueType":{"id":"10801","name":"Report a vulnerability"},"form":{"name":"Report a vulnerability","descriptionHtml":"<p>Found a weakness in one of our systems? We want to hear about it. Cleverbase is a qualified trust service provider, and the security of what we build matters to the people who rely on it.</p>\n\n<p>Use one of the options below. You will get a reference number straight away, and our assessment within five business days. You can follow the status of your report here at any time.</p>\n\n<p>This connection is encrypted, so you do not need to encrypt your report yourself. Please leave out personal data of other people; describing how you reached it is enough.</p>\n\n<p>Our full policy, including what is in and out of scope and what we promise you, is at cleverbase.com/en/legal/vulnerability-disclosure. We do not pay bug bounties, but we do credit you publicly once the issue is fixed.</p>\n\n<p>Prefer email? disclosure@cleverbase.atlassian.net reaches the same team.</p>","callToAction":"Report a vulnerability","intro":"<p>Report a security vulnerability</p>","instructions":"<p>Found a weakness in one of our systems? We want to hear about it. Cleverbase is a qualified trust service provider, and the security of what we build matters to the people who rely on it.</p>\n\n<p>Use one of the options below. You will get a reference number straight away, and our assessment within five business days. You can follow the status of your report here at any time.</p>\n\n<p>This connection is encrypted, so you do not need to encrypt your report yourself. Please leave out personal data of other people; describing how you reached it is enough.</p>\n\n<p>Our full policy, including what is in and out of scope and what we promise you, is at cleverbase.com/en/legal/vulnerability-disclosure. We do not pay bug bounties, but we do credit you publicly once the issue is fixed.</p>\n\n<p>Prefer email? disclosure@cleverbase.atlassian.net reaches the same team.</p>","icon":10303,"iconUrl":"https://cleverbase.atlassian.net/rest/servicedeskapi/requesttype/icon/type/issuetype/id/10303","key":""},"fields":[{"fieldType":"text","fieldId":"email","fieldConfigId":"","label":"Email confirmation to","description":"","descriptionHtml":"","required":true,"displayed":true,"presetValues":[]},{"fieldType":"duedate","jiraFieldType":"duedate","fieldId":"duedate","fieldConfigId":"","label":"Due date","description":"","descriptionHtml":"","required":false,"displayed":false,"presetValues":[]},{"fieldType":"select","jiraFieldType":"priority","fieldId":"priority","fieldConfigId":"","label":"Priority","description":"","descriptionHtml":"","required":false,"displayed":false,"presetValues":[],"values":[{"value":"10027","label":"Prio 1","selected":false,"children":[]},{"value":"10028","label":"Prio 2","selected":false,"children":[]},{"value":"10029","label":"Prio 3","selected":true,"children":[]},{"value":"10030","label":"Prio 4","selected":false,"children":[]},{"value":"10031","label":"Prio 5","selected":false,"children":[]}],"noneOptionRequired":false},{"fieldType":"text","jiraFieldType":"summary","fieldId":"summary","fieldConfigId":"","label":"Summary","description":"","descriptionHtml":"","required":true,"displayed":true,"presetValues":[]},{"fieldType":"text","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:textfield","fieldId":"customfield_11383","fieldConfigId":"12177","label":"Affected system","description":"The URL, hostname or IP address where you found it. If it affects our mobile app, name the app and version. Make sure to it is in scope of our policy.","descriptionHtml":"<p>The URL, hostname or IP address where you found it. If it affects our mobile app, name the app and version. Make sure to it is in scope of our policy.</p>","required":true,"displayed":true,"presetValues":[]},{"fieldType":"textarea","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:textarea","fieldId":"customfield_11384","fieldConfigId":"12178","label":"What did you find?","description":"Describe the vulnerability and what an attacker could do with it.","descriptionHtml":"<p>Describe the vulnerability and what an attacker could do with it.</p>","required":true,"displayed":true,"presetValues":[],"rendererType":"atlassian-wiki-renderer"},{"fieldType":"textarea","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:textarea","fieldId":"customfield_11385","fieldConfigId":"12179","label":"Steps to reproduce","description":"Numbered steps we can follow. Include requests, payloads or parameters where relevant.","descriptionHtml":"<p>Numbered steps we can follow. Include requests, payloads or parameters where relevant.</p>","required":true,"displayed":true,"defaultObject":"{\"type\":\"doc\",\"version\":1,\"content\":[{\"type\":\"orderedList\",\"attrs\":{\"order\":1},\"content\":[{\"type\":\"listItem\",\"content\":[{\"type\":\"paragraph\",\"content\":[{\"type\":\"text\",\"text\":\"..\"}]}]},{\"type\":\"listItem\",\"content\":[{\"type\":\"paragraph\"}]}]},{\"type\":\"paragraph\"}]}","presetValues":[],"defaultObjectAsJson":"\"{\\\"type\\\":\\\"doc\\\",\\\"version\\\":1,\\\"content\\\":[{\\\"type\\\":\\\"orderedList\\\",\\\"attrs\\\":{\\\"order\\\":1},\\\"content\\\":[{\\\"type\\\":\\\"listItem\\\",\\\"content\\\":[{\\\"type\\\":\\\"paragraph\\\",\\\"content\\\":[{\\\"type\\\":\\\"text\\\",\\\"text\\\":\\\"..\\\"}]}]},{\\\"type\\\":\\\"listItem\\\",\\\"content\\\":[{\\\"type\\\":\\\"paragraph\\\"}]}]},{\\\"type\\\":\\\"paragraph\\\"}]}\"","rendererType":"atlassian-wiki-renderer"},{"fieldType":"select","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:select","fieldId":"customfield_11386","fieldConfigId":"12180","label":"Severity, in your view","description":"We make our own assessment, but yours helps us prioritise.","descriptionHtml":"<p>We make our own assessment, but yours helps us prioritise.</p>","required":true,"displayed":true,"presetValues":[],"values":[{"value":"12551","label":"Critical","selected":false,"children":[]},{"value":"12552","label":"High","selected":false,"children":[]},{"value":"12553","label":"Medium","selected":false,"children":[]},{"value":"12554","label":"Low","selected":false,"children":[]},{"value":"12555","label":"Not sure","selected":false,"children":[]}],"noneOptionRequired":true},{"fieldType":"text","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:textfield","fieldId":"customfield_11387","fieldConfigId":"12181","label":"CVSS vector","description":"Optional. If you calculated one, paste the vector here.","descriptionHtml":"<p>Optional. If you calculated one, paste the vector here.</p>","required":false,"displayed":true,"presetValues":[]},{"fieldType":"date","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:datepicker","fieldId":"customfield_11388","fieldConfigId":"12182","label":"When did you find it?","description":"Helps us match your report against our logs.","descriptionHtml":"<p>Helps us match your report against our logs.</p>","required":true,"displayed":true,"presetValues":[]},{"fieldType":"attachment","jiraFieldType":"attachment","fieldId":"attachment","fieldConfigId":"","label":"Attachment","description":"","descriptionHtml":"","required":false,"displayed":true,"presetValues":[]},{"fieldType":"select","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:select","fieldId":"customfield_11382","fieldConfigId":"12176","label":"How should we credit you?","description":"Credit appears in our Hall of Fame after the issue is resolved.","descriptionHtml":"<p>Credit appears in our Hall of Fame after the issue is resolved.</p>","required":true,"displayed":true,"presetValues":[],"values":[{"value":"12547","label":"Full name","selected":false,"children":[]},{"value":"12548","label":"Handle or alias","selected":false,"children":[]},{"value":"12549","label":"No credit, keep me anonymous","selected":false,"children":[]},{"value":"12550","label":"Decide later","selected":true,"children":[]}],"noneOptionRequired":false},{"fieldType":"text","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:textfield","fieldId":"customfield_11389","fieldConfigId":"12183","label":"Name or handle to use","description":"Only if you chose name or handle above.","descriptionHtml":"<p>Only if you chose name or handle above.</p>","required":false,"displayed":true,"presetValues":[]},{"fieldType":"select","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:select","fieldId":"customfield_11381","fieldConfigId":"12175","label":"Have you shared this with anyone else?","description":"If a third party is involved, tell us who in the description so we can coordinate.","descriptionHtml":"<p>If a third party is involved, tell us who in the description so we can coordinate.</p>","required":true,"displayed":true,"presetValues":[],"values":[{"value":"12544","label":"No, only Cleverbase","selected":false,"children":[]},{"value":"12545","label":"Yes, another vendor is involved","selected":false,"children":[]},{"value":"12546","label":"Yes, it is already public.","selected":false,"children":[]}],"noneOptionRequired":true},{"fieldType":"checkbox","jiraFieldType":"com.atlassian.jira.plugin.system.customfieldtypes:multicheckboxes","fieldId":"customfield_11380","fieldConfigId":"12174","label":"I have read the rules of engagement","description":"I have read the policy and acted within it.","descriptionHtml":"<p>I have read the policy and acted within it.</p>","required":true,"displayed":true,"presetValues":[],"values":[{"value":"12543","label":"Yes","selected":false,"children":[]}]}],"userOrganisations":[],"canBrowseUsers":false,"requestCreateBaseUrl":"/servicedesk/customer/portal/20/create/10801","requestValidateBaseUrl":"/servicedesk/customer/portal/20/validate/10801","calendarParams":{"firstDay":0,"date":"2026-10-06T04:17:12+0200","useISO8601WeekNumbers":true,"dateIfFormat":"%e/%b/%y","dateTimeIfFormat":"%e/%b/%y %I:%M %p","timeFormat":"12"},"kbs":{"kbEnabled":false,"serviceDeskId":-1},"canRaiseOnBehalf":false,"canSignupCustomers":false,"canCreateAttachments":true,"attachmentRequiredField":false,"hasGroups":true,"canSubmitWithEmailAddress":false,"showRecaptcha":true,"siteKey":"6LePXLkdAAAAAF4gCNalrL1IvZcqbNbZf_Zakudd","mediaApiUploadInformation":{"token":"eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJlNmJkYzllZi02YWI2LTRlMDctYjNiMi1iNzkzYWI5N2NkYTQiLCJhY2Nlc3MiOnsidXJuOmZpbGVzdG9yZTp1cGxvYWQ6KiI6WyJyZWFkIiwiY3JlYXRlIiwidXBkYXRlIl0sInVybjpmaWxlc3RvcmU6Y2h1bms6KiI6WyJyZWFkIiwiY3JlYXRlIl0sInVybjpmaWxlc3RvcmU6Y29sbGVjdGlvbjp1cGxvYWQtdXNlci1jb2xsZWN0aW9uLS0xNTEyOTQ0ODMzIjpbInJlYWQiLCJjcmVhdGUiLCJ1cGRhdGUiXX0sImV4cCI6MTc5MTI1NDIzMiwibmJmIjoxNzkxMjUzMDMyLCJhbm9uSWQiOiJhbm9uLXVzZXIiLCJodHRwczovL2lkLmF0bGFzc2lhbi5jb20vYXBwQWNjcmVkaXRlZCI6ZmFsc2V9.0vNMo8ZjfeYPg7ESBes0q9IVh1aoOGL_A0fX6tzS1dE","targetCollection":"upload-user-collection--1512944833","endpointUrl":"https://api.media.atlassian.com","clientId":"e6bdc9ef-6ab6-4e07-b3b2-b793ab97cda4","tokenDurationInMins":20},"hasProformaForm":false,"proformaTemplateForm":{},"proforma":{"formExists":false,"formValid":false},"key":""},"portalWebFragments":{"headerPanels":[],"subheaderPanels":[],"footerPanels":[],"pagePanels":{"propertyPanels":[],"legacyPropertyPanels":[]}}}