diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..e0edba78 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,35 @@ +# Security Policy + +We only support the latest official relese version with respect to security vulnerabilities. Thus, only the latest or then the upcoming next release version +will receive vulnerability fixes and security updates. A vulnerability may however be reported for any version, unless it already has been fixed with a later +release version. + +## Reporting a Vulnerability + +> [!IMPORTANT] +> - Please _always_ verify that no later release version exists which fixes the vulnerability. +> - Please _always_ consult the documentation first before creating a vulnerability report: https://safeexambrowser.org/windows/win_usermanual_en.html. +> - Please _always_ attach the log file(s) of the affected session(s)! They can be found under `%LocalAppData%\SafeExamBrowser\Logs`. + +**Describe the Vulnerability** +A clear and concise description of what the vulnerability is. + +**Steps to Reproduce** +Steps to reproduce the behavior: +1. Go to '...' +2. Click on '....' +3. Scroll down to '....' +4. See ... + +**Expected Behavior** +A clear and concise description of what you expected to happen. + +**Screenshots** +If applicable, add screenshots to help explain your problem. + +**Version Information** + - OS: [e.g. Windows 10 Professional, Version 1803] + - SEB-Version [e.g. SEB 3.0.1] + +**Additional Context** +Add any other context about the vulnerability here.