Bug bounty program
CO
Coursera
Most upvoted reports6
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| XSS StoredAnalysed#205626 | Cross-site Scripting | 2018-01-12 | – | 28 |
| No Password Verification on Changing Email Address Cause Account takeoverAnalysed#292673 | Misconfiguration and Insecure Design | 2018-05-19 | – | 21 |
| Broken authentication and session management flaw#152080 | Authentication | 2016-08-18 | – | 15 |
| [www.coursera.org] Leaking password reset link on referrer header#303322 | Misconfiguration and Insecure Design | 2018-02-14 | – | 9 |
| XSS in https://www.coursera.org/courses/#127163 | Cross-site Scripting | 2016-09-14 | – | 5 |
| Stored XSS via transloadit.com and imageproxy#216822 | Cross-site Scripting | 2017-11-30 | – | 5 |
Subdomains309
| Name | Scope | First seen |
|---|---|---|
| helix.coursera.org | Not in the scope | 2026-11-14 |
| assets.helix.coursera.org | Not in the scope | 2026-11-14 |
| coursera-assets.helix.coursera.org | Not in the scope | 2026-11-14 |
| design.helix.coursera.org | Not in the scope | 2026-11-14 |
| nf.helix.coursera.org | Not in the scope | 2026-11-14 |
| cf.nf.helix.coursera.org | Not in the scope | 2026-11-14 |
| preview.nf.helix.coursera.orgstaging | Not in the scope | 2026-11-14 |
| origin-nf.helix.coursera.org | Not in the scope | 2026-11-14 |
| hello.coursera.org | Not in the scope | 2026-11-14 |
| help.coursera.org | Not in the scope | 2026-11-14 |
| helpdesk.coursera.org | Not in the scope | 2026-11-14 |
| huji.coursera.org | Not in the scope | 2026-11-14 |
| id.coursera.org | Not in the scope | 2026-11-14 |
| illinois.coursera.org | Not in the scope | 2026-11-14 |
| in.coursera.org | Not in the scope | 2026-11-14 |
| intra.coursera.org | Not in the scope | 2026-11-14 |
| io.coursera.org | Not in the scope | 2026-11-14 |
| ja.coursera.org | Not in the scope | 2026-11-14 |
| jira.coursera.orgtools | Not in the scope | 2026-11-14 |
| jobs.coursera.org | Not in the scope | 2026-11-14 |
| jp.coursera.org | Not in the scope | 2026-11-14 |
| ko.coursera.org | Not in the scope | 2026-11-14 |
| kr.coursera.org | Not in the scope | 2026-11-14 |
| labs.coursera.org | Not in the scope | 2026-11-14 |
| labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev1.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev1.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev2.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev2.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev3.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev3.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev4.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev4.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev5.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev5.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev6.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev6.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev7.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev7.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev8.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev8.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| dev9.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.dev9.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.labs-dev.coursera.orgdev | Not in the scope | 2026-11-14 |
| wildcard.labs-dr.coursera.org | Not in the scope | 2026-11-14 |
| aeumcfbuaryr.labs.coursera.org | Not in the scope | 2026-11-14 |
| afxflbjn.labs.coursera.org | Not in the scope | 2026-11-14 |
| agdliits.labs.coursera.org | Not in the scope | 2026-11-14 |
| alvgauykatrh.labs.coursera.org | Not in the scope | 2026-11-14 |
| bdegljihdbwo.labs.coursera.org | Not in the scope | 2026-11-14 |
| bpkwtocwwtae.labs.coursera.org | Not in the scope | 2026-11-14 |
| buqcodbyrigt.labs.coursera.org | Not in the scope | 2026-11-14 |
| bvbvbrnisvns.labs.coursera.org | Not in the scope | 2026-11-14 |
| bvcsyiqpjmcq.labs.coursera.org | Not in the scope | 2026-11-14 |
| cducnsxrzdos.labs.coursera.org | Not in the scope | 2026-11-14 |
| cgapnpopkpio.labs.coursera.org | Not in the scope | 2026-11-14 |
| digudsucamsg.labs.coursera.org | Not in the scope | 2026-11-14 |
| dumvtgeumbfv.labs.coursera.org | Not in the scope | 2026-11-14 |
| ekzvfrllxjno.labs.coursera.org | Not in the scope | 2026-11-14 |
| etbrkszohvph.labs.coursera.org | Not in the scope | 2026-11-14 |
| ewnwcdbvbknv.labs.coursera.org | Not in the scope | 2026-11-14 |
| exbsbtgo.labs.coursera.org | Not in the scope | 2026-11-14 |
| fldwfhutbnzg.labs.coursera.org | Not in the scope | 2026-11-14 |
| fmzgvxxqldtc.labs.coursera.org | Not in the scope | 2026-11-14 |
| fnoepxnaljgd.labs.coursera.org | Not in the scope | 2026-11-14 |
| gyuuksglvmmn.labs.coursera.org | Not in the scope | 2026-11-14 |
| hgpxomibjyen.labs.coursera.org | Not in the scope | 2026-11-14 |
| hub.labs.coursera.org | Not in the scope | 2026-11-14 |
| huboqmgaptgx.labs.coursera.org | Not in the scope | 2026-11-14 |
| iesrtgqkarqa.labs.coursera.org | Not in the scope | 2026-11-14 |
| iynxjuwilgmx.labs.coursera.org | Not in the scope | 2026-11-14 |
| japjzqmqbjuq.labs.coursera.org | Not in the scope | 2026-11-14 |
| jfwydoeyhxyk.labs.coursera.org | Not in the scope | 2026-11-14 |
| jheospafxhvi.labs.coursera.org | Not in the scope | 2026-11-14 |
| kfdzixvyatvi.labs.coursera.org | Not in the scope | 2026-11-14 |
| kgniwwumrjyw.labs.coursera.org | Not in the scope | 2026-11-14 |
| kniqzmfcxamy.labs.coursera.org | Not in the scope | 2026-11-14 |
| legebajvctbh.labs.coursera.org | Not in the scope | 2026-11-14 |
| lkkivccjykml.labs.coursera.org | Not in the scope | 2026-11-14 |
| lyavbdggalpa.labs.coursera.org | Not in the scope | 2026-11-14 |
| mlfabazwjsjw.labs.coursera.org | Not in the scope | 2026-11-14 |
| niadlyasiwrz.labs.coursera.org | Not in the scope | 2026-11-14 |
| nmiywliqlcqj.labs.coursera.org | Not in the scope | 2026-11-14 |
| nzntinjhujff.labs.coursera.org | Not in the scope | 2026-11-14 |
| oioycvuextya.labs.coursera.org | Not in the scope | 2026-11-14 |
| oltibeopdops.labs.coursera.org | Not in the scope | 2026-11-14 |
| omzvtxxyeeth.labs.coursera.org | Not in the scope | 2026-11-14 |
| pwvabqijjfji.labs.coursera.org | Not in the scope | 2026-11-14 |
| pyclrznclueo.labs.coursera.org | Not in the scope | 2026-11-14 |
| qbzbiynufjjr.labs.coursera.org | Not in the scope | 2026-11-14 |
| qediifkjpcnh.labs.coursera.org | Not in the scope | 2026-11-14 |
| qfubozmpaebk.labs.coursera.org | Not in the scope | 2026-11-14 |
| qghicnzhuhfw.labs.coursera.org | Not in the scope | 2026-11-14 |
| qieuuuppivjo.labs.coursera.org | Not in the scope | 2026-11-14 |
| qixtrkngzmfg.labs.coursera.org | Not in the scope | 2026-11-14 |
| qntylwleswfj.labs.coursera.org | Not in the scope | 2026-11-14 |
| qpldmirglawo.labs.coursera.org | Not in the scope | 2026-11-14 |
| qslwicoyjjgc.labs.coursera.org | Not in the scope | 2026-11-14 |
| qykwnajbuyni.labs.coursera.org | Not in the scope | 2026-11-14 |
| rjqqajwwtgak.labs.coursera.org | Not in the scope | 2026-11-14 |
1 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.