Expedia Group Bug Bounty Bug Bounty Program on Hackerone

{ "allows_bounty_splitting": true, "average_time_to_bounty_awarded": 342, "average_time_to_first_program_response": 5, "average_time_to_report_resolved": 2478, "handle": "expediagroup_bbp", "id": 0, "managed_program": true, "name": "Expedia Group Bug Bounty", "offers_bounties": true, "offers_swag": false, "response_efficiency_percentage": 92, "submission_state": "open", "url": "https://hackerone.com/expediagroup_bbp", "website": "https://www.expediagroup.com/", "targets": { "in_scope": [ { "asset_identifier": "*.abritel.fr", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.bookabach.co.nz", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.carrentals.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Third-party subdomains are out of scope and not eligible for bounties. Please review the out-of-scope list below:\ndbmanalytics.carrentals.com", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.cheaptickets.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Third-party subdomains are out of scope and not eligible for bounties. Please review the out-of-scope list below:\nfaq-lab.cheaptickets.com, faq.cheaptickets.com, groups.cheaptickets.com, link.mailer.cheaptickets.com, login.cheaptickets.com, mi.cheaptickets.com, refer.cheaptickets.com, secure.cheaptickets.com, and track.cheaptickets.com.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.ean.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.expedia-aarp.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.expedia.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.expediaagents.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.expediacruises.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.expediagroup.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.expediapartnercentral.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": ".", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.expediapartnersolutions.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Third-party subdomains are out of scope and not eligible for bounties. Please review the out-of-scope list below:\n\ndiscoveryhub.expediapartnersolutions.com, gco-get.expediapartnersolutions.com, gco.expediapartnersolutions.com, info.expediapartnersolutions.com, status.expediapartnersolutions.com, support.expediapartnersolutions.com, sure.expediapartnersolutions.com, taap-ui-bundles-test.expediapartnersolutions.com, taap-ui-bundles.expediapartnersolutions.com, and taapacademy.expediapartnersolutions.com.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.expediataap.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.expediataaprewards.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.fewo-direkt.de", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.flights.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.hotels.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.hotwire.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.hotwirepartnercentral.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.lastminute.co.nz", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for a bounty. Before submitting your report, please confirm that the asset you are testing does not appear in the Out of Scope list below.\n\n **Out of scope subdomains:** - res.ac.lastminute.co.nz\n\nPlease note *.lastminute.com is NOT owned by Expedia Group and is out of scope.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.lastminute.com.au", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for a bounty. Before submitting your report, please confirm that the asset you are testing does not appear in the Out of Scope list below.\n *Out of scope subdomains:* - mi.lastminute.com.au, mtx.lastminute.com.au, smtx.lastminute.com.au\n\n\nPlease note *.lastminute.com is NOT owned by Expedia Group and is out of scope.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.orbitz.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.stayz.com.au", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.tiqets.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.travelocity.ca", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\nclick.e.travelocity.ca, fr.groups.travelocity.ca, groups.travelocity.ca, om.travelocity.ca, and oms.travelocity.ca.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.travelocity.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\nbr.ac.travelocity.com, groups.travelocity.com, mi.travelocity.com, om.travelocity.com, oms.travelocity.com, thingstodo.travelocity.com, track.travelocity.com, and view.e.travelocity.com.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "*.vrbo.com", "asset_type": "WILDCARD", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\nli.vrbo.com, media.vrbo.com, om.vrbo.com, community.vrbo.com, and trk.vrbo.com.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "*.wotif.com", "asset_type": "WILDCARD", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\ngroups.wotif.com, link.wotif.com, res.ac.wotif.com, smobile.wotif.com, and w.smobile.wotif.com.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "1245772818", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Vrbo iOS app](https://apps.apple.com/us/app/vrbo-vacation-rentals/id1245772818)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "284803487", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Travelocity iOS app](https://apps.apple.com/us/app/travelocity-hotels-flights/id284803487)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "284971959", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Hotels.com iOS app](https://apps.apple.com/us/app/hotels-com-book-your-hotel/id284971959)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "403546234", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Orbitz iOS app](https://apps.apple.com/us/app/orbitz-hotels-flights/id403546234)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "427916203", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Expedia iOS app](https://apps.apple.com/us/app/expedia-hotels-flights-car/id427916203)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "483394780", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "This is the ebookers iOS app \n\nhttps://apps.apple.com/us/app/ebookers-hotels-flights/id483394780", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "506426310", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[CarRentals iOS App](https://apps.apple.com/us/app/carrentals-com-rental-car-app/id506426310)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "531549799", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Wotif iOS app](https://apps.apple.com/au/app/wotif-hotels-flights/id531549799)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "566635048", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Hotwire iOS App](https://apps.apple.com/us/app/hotwire-last-minute-hotels/id566635048)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "642441300", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[HomeAway / Stayz & Bookabach iOS App](https://apps.apple.com/us/app/homeaway-holiday-rentals/id642441300)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "880759727", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Cheaptickets iOS app](https://apps.apple.com/us/app/cheaptickets-hotels-flights/id880759727)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "987675995", "asset_type": "APPLE_STORE_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.carrentals", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[CarRentals Android App](https://play.google.com/store/apps/details?id=com.carrentals&hl=en_CA)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.cheaptickets", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[CheapTickets Android app](https://play.google.com/store/apps/details?id=com.cheaptickets)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.ebookers", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "This is the ebookers Android app \n\nhttps://play.google.com/store/apps/details?id=com.ebookers", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.expedia.bookings", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Expedia Android App](https://play.google.com/store/apps/details?id=com.expedia.bookings)\n\n", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.expediapartnercentral", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": false, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.hcom.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Hotels Android App](https://play.google.com/store/apps/details?id=com.hcom.android) ", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.homeaway.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[HomeAway Android app](https://play.google.com/store/apps/details?id=com.vacationrentals.homeaway&hl=en)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.hotwire.hotels", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Hotwire Android App](https://play.google.com/store/apps/details?id=com.hotwire.hotels) ", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.orbitz", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Orbitz Android app](https://play.google.com/store/apps/details?id=com.orbitz)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.travelocity.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Travelocity Android app](https://play.google.com/store/apps/details?id=com.travelocity.android)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.vrbo.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[VRBO Android App](https://play.google.com/store/apps/details?id=com.vrbo.android) ", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "com.wotif.android", "asset_type": "GOOGLE_PLAY_APP_ID", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "[Wotif Android app](https://play.google.com/store/apps/details?id=com.wotif.android)", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.abritel.fr", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "www.abritel.fr/api/track is out of scope. Please do not test this endpoint or submit reports related to it.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.bookabach.co.nz", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.carrentals.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.cheaptickets.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.ebookers.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.ebookers.fi", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.expedia-aarp.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.expedia.com", "asset_type": "URL", "availability_requirement": "high", "confidentiality_requirement": "high", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Only point-of-sale assets under www.expedia.com are in scope, including regional versions such as www.expedia.co.in and www.expedia.co.uk.\n\nAll other subdomains are out of scope for Tier 0.", "integrity_requirement": "high", "max_severity": "critical" }, { "asset_identifier": "www.expediacruises.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.expediagroup.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.expediapartnercentral.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.expediataap.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "high" }, { "asset_identifier": "www.fewo-direkt.de", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.hotels.com", "asset_type": "URL", "availability_requirement": "medium", "confidentiality_requirement": "medium", "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Only point-of-sale assets under www.hotels.com are in scope, including regional versions such as www.in.hotels.com, www.uk.hotels.com, and www.fr.hotels.com.\n\nAll other subdomains are out of scope for Tier 0.", "integrity_requirement": "medium", "max_severity": "critical" }, { "asset_identifier": "www.hotwire.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.lastminute.co.nz", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.lastminute.com.au", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.mrjet.se", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.orbitz.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.stayz.com.au", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.tiqets.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.travelocity.ca", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.travelocity.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.vrbo.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": "Only point-of-sale assets under www.vrbo.com are in scope. All other subdomains are out of scope for Tier 0.", "integrity_requirement": null, "max_severity": "critical" }, { "asset_identifier": "www.wotif.com", "asset_type": "URL", "availability_requirement": null, "confidentiality_requirement": null, "eligible_for_bounty": true, "eligible_for_submission": true, "instruction": null, "integrity_requirement": null, "max_severity": "critical" } ], "out_of_scope": [] } }

Expedia Group Bug Bounty

In scope

Recent changes

Community reports

Your notes

Out of scope