OpenBugBounty.org > Bug Bounty List > Babiel GmbH Bug Bounty Program

Babiel GmbH Bug Bounty Program

Babiel GmbH runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Babiel GmbH

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Babiel GmbH and researchers.

Bug bounty program allow private submissions only.

Bug Bounty Scope

The following websites are within the scope of the program:

*.babiel.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

We are always interested in getting reports about vulnerabilities in websites we are hosting.

This site was created to better coordinate the unsolicited reports we already receive from OpenBugBounty.

Please note that we are also hosting some 3rd party applications we are not responsible for. Do not report vulnerabilities for any sites not running in our AS: https://bgp.he.net/AS198913#_prefixes

Testing Requirements:

NO REPORTS ABOUT SPF RECORDS OR TLS CIPHERS WILL BE ACCEPTED.
NO AUTOMATED SECURITY SCANNERS (Nessus, Acunetix etc.)
NO TESTING OF CONTACT FORMS.

No intrusive testing, high requests per second or anything that could lead to any impact of our websites.

Possible Awards:

If the site was developed by us, we sometimes send some candy, swag or money via paypal if they match the general requirements (see above).

Please notice: we don't have a fixed budget and must decide on case-to-case basis based on severity.

https://twitter.com/Babiel/status/928267395541749760

Special Notes:

We have created this page after receiving multiple reports via OpenBugBounty.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Please report any other vulnerabilites to [email protected]

General Requirements:

Testing Requirements:

No intrusive testing, high rps or anything that could lead to any impact of our websites.

Possible Awards:

If the site was developed by us, we sometimes send some candy or swag.

https://twitter.com/Babiel/status/928267395541749760

Special Notes:

We have created this page after receiving multiple unsolicited reports via OpenBugBounty.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024