Quizlet

Description

Quizlet is the world's largest student and teacher online learning community. Every month, over 30 million active learners from 130 countries practice and master more than 200 million study sets of content on every conceivable subject and topic. Our mission is simple: To help students (and their teachers) practice and master whatever they are learning. Quizlet provides engaging, customizable activities with contributions from people everywhere. Quizlet invites you to test and help secure our primary publicly facing assets—focusing on our web, mobile, and API applications. We appreciate your efforts and hard work in making the internet (and Quizlet) more secure and look forward to working with the researcher community to create a meaningful and successful bug bounty program. Good luck and happy hunting! Please note: Quizlet is an educational platform, not an assessment platform for cheating or academic dishonesty. As such, submissions related to cheating mechanisms within our gaming features, testing functionality, or attempts to manipulate user interactions to gain an unfair advantage will not be considered in scope. Similarly, issues such as rate limiting, scraping of publicly available content, or automation concerns are out of scope unless they directly pertain to accessing or exploiting premium content or introduce a significant security impact. Rewards/Ratings For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy . However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.

Targets

Any domain/property of Quizlet not listed in the targets section is out of scope. This includes any/all subdomains not listed above. Credentials Please self sign up at https://quizlet.com/ for a free user account. You can request accounts at Plus and Teacher privilege levels by creating a support ticket with Bugcrowd Support . Please make sure to read more about the various privileges in the Role Information section. Role Information Under the free user role, you have the ability to create classes (Private only please) within the Bugcrowd University School and can create any sets you want within that class. Please limit the view to "Only Me" as seen in this screenshot: Here You also have the ability to create Diagrams, but please limit these just like above Go - Ad-free studying, Flashcards themes, Night Theme, offline access on the apps Plus - Ad-free studying, upload your own images to sets, record custom audio, create or join as many classes as you want, study with Long-Term Learning, advanced diagram set creation tools, offline access on the apps, Night Theme Teacher - Ad-free studying for students on sets you create, track student study activity with Class Progress, upload your own images to sets, record custom audio, customize games of Quizlet Live, create as many classes as you need, advanced diagram set creation tools, offline access on the apps, Night Theme Out-of-Scope Denial of Service attacks Anything that impacts the service or other users. Essentially, be not seen or heard by users of the site and stay within your own sandbox areas. Contact or feedback forms Anything not included in https://*.quizlet.com There is a specific school called "Bugcrowd University" that should be used for creating data on Quizlet. Creating entries outside of this school, or creating non-private classes constitutes as impacting other users.