Skip to main content

Requesting More Information

Use Request More Info when a report does not have enough detail to reproduce the vulnerability.

Send a request​

  1. Open the report in Submissions.
  2. In the Request More Info panel, write your question. You can start from a quick template.
  3. Send the request.

CVD Portal sends your message to the researcher by email. The reply-to address is your own email address, so the researcher replies to you directly. The reply does not come back into CVD Portal.

Requirements​

The report must have a contact email. If the researcher sent the report without an email address, you cannot send a request.

Records​

CVD Portal records each request in the communication log of the report and writes an INFO_REQUESTED entry in the audit log. If the email fails, CVD Portal records nothing and shows an error.

Limits​

  • CVD Portal does not pause the acknowledgment or SLA timers while you wait for a reply.
  • The message travels as a normal email. It is not an encrypted channel inside CVD Portal.