Report #29975

Reflected XSS Vulnerability on Etherscan Address Page (CVE-2024-12345)

Immunefi Response

Thank you for your submission to the Beanstalk bug bounty program. Unfortunately, after reviewing your report, Immunefi has decided to close it due to the assessed asset being out of scope.

Immunefi review:

• assessed impact by the triage team is not in scope for the bug bounty program
• assessed asset https://etherscan.io by the triage team is not in scope for the bug bounty program
• PoC has not been submitted to the project
• Technical Review:
• The Etherscan domain is not in scope of Beanstalk's Bug Bounty Program. Please refer to Websites and Applications assets listed in the asset table to identify sites which are in scope.

Please note that the project will receive a report of the closed submission and may choose to re-open it, but they are not obligated to do so.