Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 20 Sep 2026.

This bounty is part of the Atlassian Marketplace Bounty Program codeclou GmbH is a creative team of full-stack software developers based in Germany. We develop Apps and Web-Applications with the latest frameworks and strive for high software quality. Therefore, we set great value upon security, clean code, high test-rate, sustainable development and detailed documentation. We think and work Agile and UX-centered and deliver high performance solutions to boost your workflow. Get Started (tl;dr version) Do not access, impact, destroy or otherwise negatively impact codeclou GmbH or Atlassian customers, or customer data in any way. Ensure that you use your @bugcrowdninja.com email address. Ensure you understand the targets, scopes, exclusions, and rules below. Please note that the application listed in the target is in scope. The URL (the Marketplace page) itself is NOT. Quick Links CUSTOMFIELD EDITOR FOR JIRA Customerfield Editor for Jira - Data Center Customfield Editor for Jira - User Guide Customfield Editor for Jira - Admin Guide Customfield Editor for Jira - REST API Documentation Customerfield Editor for Jira - Cloud Customfield Editor for Jira - Cloud Introduction Guide ADVANCED CODEBLOCKS FOR CONFLUENCE Advanced Codeblocks for Confluence - Cloud User Guide CLOUD Advanced Codeblocks for Confluence - Data Center User Guide DC Focus Areas Below is a list of some of the vulnerability classes that we are seeking reports for: Cross Instance Data Leakage/Access** Server-side Remote Code Execution (RCE) Server-Side Request Forgery (SSRF) Stored/Reflected Cross-site Scripting (XSS) Cross-site Request Forgery (CSRF) SQL Injection (SQLi) XML External Entity Attacks (XXE) Access Control Vulnerabilities (Insecure Direct Object Reference issues, etc) Path/Directory Traversal Issues Ensure you review the out of scope and exclusions list for further details. ** Cross Instance Data Leakage/Access refers to unauthorized data access between instances. Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority. Please see below for deviations.