Vulnerability Reporting Form

If you are an OutSystems customer or partner and have access to our Support Portal, please dont't use this form and submit your vulnerability reports through OutSystems Support using the available channels.

Your Information

Name

Phone Contact

Company

Do you want to be acknowledged by name in any published document about this vulnerability?

Yes

Vulnerability Information

What is the name of the affected product or software?

What version number of the product or software is affected?

Please include the version number you tested, such as 1.2.4, if known; otherwise put "unknown." A version number, firmware version, builder number, or release date is helpful for identifying affected products

What are the steps to reproduce the vulnerability?

Please describe all the steps taken to setup and execute the vulnerability exploit. (max 20,000 characters)

What does an attacker gain by exploiting this vulnerability (i.e. what is the impact) ?

Additional privileges, etc. Please be specific as possible including which of the CIA + Authenticity concepts are affected (max 20,000 characters)

What was the sample code that was used to test or demonstrate the vulnerability?

Please provide the links for repositories of tools used or add any other excerpts used to reproduce the vulnerability.

Were there other parties involved?

Yes

What was the software configuration of the computer or device configuration at time of discovering the vulnerability?

Detail any relevant information about connected components and devices if vulnerability arises during interaction:

Is this vulnerability publicly known?

Yes

Is there evidence that this vulnerability is being actively exploited?

Yes

Do you plan to publicly disclose this vulnerability yourself?

Yes

Public PGP Key

Optionally, if you would like to use PGP encrypted email, please include either your ASCII-armored PGP key or a URL to your key. OutSystems will use this key for future correspondence

Private Comments

Comments in this box will be kept private and will not be included in any publication (max 20,000 characters)

Upload a File

You can upload one file limited to 25 MB. Please leave a note in the Private Comments below if you would like to make alternative arrangements to send files

Report a vulnerability