Reporting discovered security vulnerabilities

[matejp]

Hello, I discovered a security vulnerability in Alfresco Content Services Enterprise and Community. I tried to disclose it through Hyland Community but I do not have access and therefore can't reach support. Is there any other way to disclose this?

Thank you.

[pmcmahon · Accepted solution]

At this time, non-Hyland customers/partners can report through our Vulnerability Disclosure Program (VDP)

This is found on the Hyland Trust Center ( https://security.hyland.com/ )  labeled "Report a Vulnerability" within the Company Information card.

Customers and Partners should continue to use Hyland Community (work with your Hyland representative if you cannot access).

[matejp]

Thank you for your reply. I checkd it out and it should be possible with the link you provided, however since there was no reply to my question for quite some time, I already reported it through HackerOne. Hope that will also reach the Alfresco team.