https://it-sicherheit.hs-fulda.de/en/vorfall_melden/schwachstelle/index.html Content Your responsible disclosure What we promise Qualified reporting of vulnerabilities Non-Qualified reporting of vulnerabilities Disclose your finding responsible If you discover vulnerabilities in the IT systems and web applications of the Fulda University of Applied Science, please inform us. We will then take immediate action to remedy the vulnerability as quickly as possible. Your responsible disclosure Before reporting, please refer to the section “Non-qualified vulnerabilities” for information on cases that do not fall within the scope of our Responsible Disclosure Policy and will not be processed within this framework. Send your findings regarding the security issue by email to it-sicherheit@hs-fulda.de. Do not exploit the vulnerability or issue by, for example, downloading, uploading, modifying, or deleting data or executing code. Do not disclose information about the vulnerability to third parties or institutions. Do not carry out attacks on our IT systems that compromise, alter, or manipulate the infrastructure. Do not carry out social engineering (e.g., phishing), (distributed) denial of service, spam, or other attacks on the Fulda University of Applied Science. Provide us with sufficient information so that we can reproduce and analyze the problem. Please also provide a contact option for any queries. Unfortunately, we cannot offer any financial rewards (bug bounty). As a rule, the address or URL of the affected system and a description of the vulnerability are sufficient. However, complex vulnerabilities may require further explanation and documentation. Hugo en-US