PSIRT contact request

Authentication & Security
1

Hello,

Trend Micro’s Zero Day Initiative is a security/vulnerability research organization. We have discovered a vulnerability in DreamFactory and we would like to disclose it responsibly to your company. ZDI contacted you via DSPsupport@dreamfactory.com but we did not receive any response since April 16, 2025. We need your secure team/PSIRT/or other appropriate contact.

If we are unable to contact you after 15 days, we reserve the right to publish this vulnerability in accordance with our Disclosure Policy, which you can read here: https://www.zerodayinitiative.com/advisories/disclosure_policy/

Thank you and best regards,

Mai Mostafa
Program Manager, Zero Day Initiative
Trend Micro

2

Dear Mai Mostafa,

Thank you for your message and for the responsible disclosure effort. Please send the vulnerability details to our security team at security@dreamfactory.com, which is our designated contact for PSIRT matters. We will review and respond promptly.

Best regards,