Re: Security Vulnerability : [Immediate Action Required]

--00000000000058535a06309ac69d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello Mishal,

First of all, you have emailed many ASF addresses, some of which are
mailinglists. Please report issues only to the correct address in the
future. You can read more about how to report issues at
https://security.apache.org/report. This page should answer your questions
as well.


Kind regards,

Arnout Engelen
ASF Security

On Mon, Mar 17, 2025 at 10:17=E2=80=AFPM Mishal Khan <mishalcyber2k6@gmail.=
com>
wrote:

> Hi Team,
>
> I am an Independent Security Researcher running a vulnerability
> identification service , and I accidentally found some vulnerabilities in
> your infrastructure. which can cause damage to your website and halt your
> business operations.
>
> To avoid any type of doubt or any type of scam I have created a report
> regarding the vulnerability which includes POC, screenshots, and suggeste=
d
> solutions so tell me can I report here ? Is there any appreciation reward
> for a valid report/bug ?
>
> I'm willing to work with you as a team and hopefully we will be working
> together as well!
>
> Kindly respond as soon as possible :)
>
> Regards,
> Mishal khan
>

--00000000000058535a06309ac69d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello Mishal,</div><div><br></div><div>First of all, =
you have emailed many ASF addresses, some of which are mailinglists. Please=
 report issues only to the correct address in the future. You can read more=
 about how to report issues at <a href=3D"https://security.apache.org/repor=
t" target=3D"_blank">https://security.apache.org/report</a>. This page shou=
ld answer your questions as well.</div><div><br></div><div><br></div><div>K=
ind regards,</div><div><br></div><div>Arnout Engelen</div><div>ASF Security=
</div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_=
attr">On Mon, Mar 17, 2025 at 10:17=E2=80=AFPM Mishal Khan &lt;<a href=3D"m=
ailto:[email protected]" target=3D"_blank">[email protected]<=
/a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0=
px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><=
div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><span style=3D"font-size:=
13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,san=
s-serif">Hi Team,</span><br style=3D"font-size:13px;color:rgb(0,0,0);font-f=
amily:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><br style=3D"font-s=
ize:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial=
,sans-serif"><span style=3D"font-size:13px;color:rgb(0,0,0);font-family:&qu=
ot;Open Sans&quot;,helvetica,arial,sans-serif">I am an Independent Security=
 Researcher running a vulnerability identification service , and I accident=
ally found some vulnerabilities in your infrastructure. which can cause dam=
age to your website and halt your business operations.</span><br style=3D"f=
ont-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,=
arial,sans-serif"><br style=3D"font-size:13px;color:rgb(0,0,0);font-family:=
&quot;Open Sans&quot;,helvetica,arial,sans-serif"><span style=3D"font-size:=
13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,san=
s-serif">To avoid any type of doubt or any type of scam I have created a re=
port regarding the vulnerability which includes POC, screenshots, and sugge=
sted solutions so tell me can I report here ? Is there any appreciation rew=
ard for a valid report/bug ?</span><br style=3D"font-size:13px;color:rgb(0,=
0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><br styl=
e=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helv=
etica,arial,sans-serif"><span style=3D"font-size:13px;color:rgb(0,0,0);font=
-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif">I&#39;m willing t=
o work with you as a team and hopefully we will be working together as well=
!</span><br style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open=
 Sans&quot;,helvetica,arial,sans-serif"><br style=3D"font-size:13px;color:r=
gb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><sp=
an style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quo=
t;,helvetica,arial,sans-serif">Kindly respond as soon as possible :)</span>=
<br style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&qu=
ot;,helvetica,arial,sans-serif"><br style=3D"font-size:13px;color:rgb(0,0,0=
);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><span style=
=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helve=
tica,arial,sans-serif">Regards,</span><br style=3D"font-size:13px;color:rgb=
(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><span=
 style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;=
,helvetica,arial,sans-serif">Mishal khan</span></div>
</div>
</div>
</blockquote></div>

--00000000000058535a06309ac69d--