What types of bugs are typically in scope for the Cloudflare Bug Bounty program?

Question

Grade: Education Subject: Support
What types of bugs are typically in scope for the Cloudflare Bug Bounty program?
Asked by:
80 Viewed 80 Answers

Answer (80)

Best Answer
(343)
In-scope bugs generally include critical vulnerabilities like Remote Code Execution (RCE), SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SSRF), and authentication/authorization bypasses. Specific details on in-scope and out-of-scope vulnerabilities are clearly outlined in the Bug Bounty program's rules on HackerOne.