Skip to content

Scholr (demo): Scope

Download CSVLast updated on
1-4 of 4
Assets of Scholr (demo)
Asset nameTypeCoverageMax. severityLast updateResolved Reports

www.scholr.example

The learner web app and sign-in.

  • django
DomainIn scopeCritical0 (0%)

api.scholr.example

Course, enrolment and submission API. Entitlement and IDOR checks are the priority.

  • django
  • postgresql
APIIn scopeCritical0 (0%)

*.scholr.example

Scholr-operated subdomains, except those out of scope.

WildcardIn scopeCritical0 (0%)

status.scholr.example

Out of scope: third-party status page.

OtherOut of scopeNone0 (0%)

1-4 of 4

Rewards

This is a vulnerability disclosure program: it does not pay cash rewards. Every resolved report earns reputation and a public thank-you on the Thanks page.

SeverityReputation
Low+10 reputation
Medium+15 reputation
High+22 reputation
Critical+32 reputation

Earned when a report is resolved at that severity. How reputation works

Stats

Reports received | 90 days
0
Last report resolved
–
Reports resolved
0
Hackers thanked
0
Assets in scope
3