owncloud-bug-bounty-program
22
In Scope
3
Out of Scope
In-Scope Assets (22)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://apps.apple.com/app/id1359583808 | IOS | Yes | - | |
| https://github.com/owncloud/activity | OTHER | Yes | - | |
| https://github.com/owncloud/android | OTHER | Yes | - | |
| https://github.com/owncloud/client | OTHER | Yes | - | |
| https://github.com/owncloud/core | OTHER | Yes | - | |
| https://github.com/owncloud/core/tree/master/apps/files | OTHER | Yes | - | |
| https://github.com/owncloud/customgroups | OTHER | Yes | - | |
| https://github.com/owncloud/gallery | OTHER | Yes | - | |
| https://github.com/owncloud/guests | OTHER | Yes | - | |
| https://github.com/owncloud/impersonate | OTHER | Yes | - | |
| https://github.com/owncloud/ios-app | OTHER | Yes | - | |
| https://github.com/owncloud/notifications | OTHER | Yes | - | |
| https://github.com/owncloud/oauth2 | OTHER | Yes | - | |
| https://github.com/owncloud/ocis | OTHER | Yes | - | |
| https://github.com/owncloud/openidconnect | OTHER | Yes | - | |
| https://github.com/owncloud/richdocuments | OTHER | Yes | - | |
| https://github.com/owncloud/updater | OTHER | Yes | - | |
| https://github.com/owncloud/user_ldap | OTHER | Yes | - | |
| https://github.com/owncloud/web | OTHER | Yes | - | |
| https://github.com/owncloud/web-extensions | OTHER | Yes | - | |
| https://owncloud.org/install/#install-clients | OTHER | Yes | - | |
| https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | Yes |
Out-of-Scope Assets (3)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.owncloud.com | OTHER | Yes | |
| *.owncloud.org | OTHER | Yes | |
| All domains or subdomains not listed in the above list of 'Scopes' | OTHER | Yes |
Scope Changes (155)
Mar 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://github.com/owncloud/oauth2 | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/richdocuments | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/gallery | URL | In Scope | 17:21 |
| Added | https://owncloud.org/install#install-clients | OTHER | In Scope | 17:21 |
| Added | https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | In Scope | 17:21 |
| Added | https://apps.apple.com/app/id1359583808 | IOS | In Scope | 17:21 |
| Added | https://github.com/owncloud/customgroups | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/guests | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/richdocuments | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/notifications | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/client | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/core | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/gallery | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/ocis | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/web | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/web-extensions | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/user_ldap | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/oauth2 | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/openidconnect | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/activity | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/impersonate | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/updater | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/core/tree/master/apps/files | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/android | OTHER | In Scope | 17:21 |
| Added | https://github.com/owncloud/ios-app | OTHER | In Scope | 17:21 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 17:21 |
| Added | *.owncloud.org | OTHER | Out of Scope | 17:21 |
| Added | *.owncloud.com | OTHER | Out of Scope | 17:21 |
| Added | https://github.com/owncloud/activity | URL | In Scope | 17:21 |
| Added | https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | In Scope | 17:21 |
| Added | https://github.com/owncloud/notifications | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/client | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/web | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/user_ldap | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/openidconnect | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/impersonate | URL | In Scope | 17:21 |
| Added | *.owncloud.com | WILDCARD | Out of Scope | 17:21 |
| Added | https://owncloud.org/install#install-clients | URL | In Scope | 17:21 |
| Added | https://apps.apple.com/app/id1359583808 | IOS | In Scope | 17:21 |
| Added | https://github.com/owncloud/ocis | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/web-extensions | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/customgroups | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/core | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/updater | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/core/tree/master/apps/files | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/android | URL | In Scope | 17:21 |
| Added | https://github.com/owncloud/ios-app | URL | In Scope | 17:21 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 17:21 |
| Added | *.owncloud.org | WILDCARD | Out of Scope | 17:21 |
| Added | https://github.com/owncloud/guests | URL | In Scope | 17:21 |
| Program Removed | — | — | — | 16:06 |
Mar 3, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | In Scope | 08:54 |
| Added | https://owncloud.org/install#install-clients | OTHER | In Scope | 08:54 |
| Added | https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | In Scope | 08:54 |
| Added | https://apps.apple.com/app/id1359583808 | IOS | In Scope | 08:54 |
| Added | https://github.com/owncloud/customgroups | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/guests | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/richdocuments | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/notifications | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/client | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/core | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/gallery | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/ocis | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/web | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/web-extensions | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/user_ldap | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/oauth2 | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/openidconnect | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/activity | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/impersonate | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/updater | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/core/tree/master/apps/files | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/android | OTHER | In Scope | 08:54 |
| Added | https://github.com/owncloud/ios-app | OTHER | In Scope | 08:54 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 08:54 |
| Added | *.owncloud.org | OTHER | Out of Scope | 08:54 |
| Added | *.owncloud.com | OTHER | Out of Scope | 08:54 |
| Added | https://github.com/owncloud/richdocuments | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/gallery | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/updater | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/core/tree/master/apps/files | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/customgroups | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/guests | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/notifications | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/web | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/user_ldap | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/oauth2 | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/core | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/ocis | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/web-extensions | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/openidconnect | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/activity | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/impersonate | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/ios-app | URL | In Scope | 08:54 |
| Added | https://owncloud.org/install#install-clients | URL | In Scope | 08:54 |
| Added | https://apps.apple.com/app/id1359583808 | IOS | In Scope | 08:54 |
| Added | https://github.com/owncloud/client | URL | In Scope | 08:54 |
| Added | https://github.com/owncloud/android | URL | In Scope | 08:54 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 08:54 |
| Added | *.owncloud.org | WILDCARD | Out of Scope | 08:54 |
| Added | *.owncloud.com | WILDCARD | Out of Scope | 08:54 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 13:08 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://github.com/owncloud/richdocuments | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/notifications | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/web-extensions | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/activity | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/ios-app | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/customgroups | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/ocis | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/web | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/user_ldap | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/impersonate | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/core/tree/master/apps/files | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/android | URL | In Scope | 00:51 |
| Added | https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | In Scope | 00:51 |
| Added | https://apps.apple.com/app/id1359583808 | IOS | In Scope | 00:51 |
| Added | https://github.com/owncloud/client | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/gallery | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/openidconnect | URL | In Scope | 00:51 |
| Added | *.owncloud.com | WILDCARD | Out of Scope | 00:51 |
| Added | https://github.com/owncloud/core | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/oauth2 | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/updater | URL | In Scope | 00:51 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 00:51 |
| Added | *.owncloud.org | WILDCARD | Out of Scope | 00:51 |
| Added | https://owncloud.org/install#install-clients | URL | In Scope | 00:51 |
| Added | https://github.com/owncloud/guests | URL | In Scope | 00:51 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://owncloud.org/install#install-clients | OTHER | In Scope | 21:40 |
| Removed | https://play.google.com/store/apps/details?id=com.owncloud.android | ANDROID | In Scope | 21:40 |
| Removed | https://apps.apple.com/app/id1359583808 | IOS | In Scope | 21:40 |
| Removed | https://github.com/owncloud/customgroups | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/guests | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/richdocuments | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/notifications | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/client | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/core | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/gallery | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/ocis | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/web | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/web-extensions | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/user_ldap | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/oauth2 | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/openidconnect | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/activity | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/impersonate | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/updater | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/core/tree/master/apps/files | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/android | OTHER | In Scope | 21:40 |
| Removed | https://github.com/owncloud/ios-app | OTHER | In Scope | 21:40 |
| Removed | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 21:40 |
| Removed | *.owncloud.org | OTHER | Out of Scope | 21:40 |
| Removed | *.owncloud.com | OTHER | Out of Scope | 21:40 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 00:33 |
| Added | *.owncloud.org | OTHER | Out of Scope | 00:33 |
| Added | *.owncloud.com | OTHER | Out of Scope | 00:33 |