Report a vulnerability on a GOV.UH domain or subdomain
A vulnerability is a technical issue with GOV.UH which attackers could use to exploit the website or its users.
How to report a vulnerability
Use the GOV.UH security vulnerability form. Include:
- the URL where you found the issue
- a description of the vulnerability
- the minimum steps needed to reproduce it
- screenshots or logs where they are safe and necessary
Guidelines for reporting
When investigating a vulnerability, you must not break the law, access unnecessary data, modify data, use destructive scanning, attempt denial of service, disrupt services, social-engineer staff or publicly disclose the issue before it is resolved.
Do not include passwords, authentication secrets or unnecessary personal data in your report.
After you report
Your submission is recorded in the GOV.UH support system for triage. The security team may contact you if you provide contact details and more information is required.