Zabka Group Vulnerability Disclosure Program

{
  "id": "f8b4efd3-7722-40b1-8a96-faedf489c9d5",
  "name": "Zabka Group Vulnerability Disclosure Program",
  "company_handle": "zabkapolska",
  "handle": "zabkagroup-vdp",
  "url": "https://www.intigriti.com/programs/zabkapolska/zabkagroup-vdp/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 0,
    "currency": "EUR"
  },
  "max_bounty": {
    "value": 0,
    "currency": "EUR"
  },
  "targets": {
    "in_scope": [
      {
        "type": "wildcard",
        "endpoint": "*.zabka.pl",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://delio.com.pl",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://dietly.pl",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://jush.pl",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://lite.tech",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://maczfit.pl",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://masterlifecrm.com",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://zabka.pl",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "url",
        "endpoint": "https://zabkagroup.com",
        "description": null,
        "impact": "No Bounty"
      },
      {
        "type": "other",
        "endpoint": "Mobile applications",
        "description": "[Żabka Jush Android](https://play.google.com/store/apps/details?id=pl.jush.app)\n[Żabka Jush iOS](https://apps.apple.com/pl/app/%C5%BCabka-jush-zakupy-z-dostaw%C4%85/id1585639034)\n[Bink Android](https://play.google.com/store/apps/details?id=app.lite.bink)\n[Maczfit Android](https://play.google.com/store/apps/details?id=com.maczfit.app2)\n[Maczfit iOS](https://apps.apple.com/pl/app/maczfit/id1519195072)\n[MaczDostawca Android](https://play.google.com/store/apps/details?id=pl.maczfit.maczdostawca2)\n[MaczDostawca iOS](https://apps.apple.com/pl/app/maczdostawca/id1621061172?)\n[Dietly Android](https://play.google.com/store/apps/details?id=com.dietly.panel)\n[Dietly iOS](https://apps.apple.com/pl/app/dietly/id1642713520)\n[Cyberstore Android](https://play.google.com/store/apps/details?id=pl.zabka.cyberstore&hl=pl)",
        "impact": "No Bounty"
      }
    ],
    "out_of_scope": [
      {
        "type": "wildcard",
        "endpoint": "*.zabka-snrs.zabka.pl",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "iprange",
        "endpoint": "195.94.213.80 - 195.94.213.95",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "iprange",
        "endpoint": "217.153.50.112 - 217.153.50.127",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "other",
        "endpoint": "Żabka Nano stores",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "zabka-snrs.zabka.pl",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "https://foodziki.zabka.pl",
        "description": null,
        "impact": "Out of scope"
      }
    ]
  }
}