moneybox-bug-bounty
6
In Scope
2
Out of Scope
In-Scope Assets (6)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://admin-roundups.moneyboxapp.org | URL | Yes | ||
| https://admin.moneyboxapp.org | URL | Yes | ||
| https://api.moneyboxapp.com | URL | Yes | ||
| https://apps.apple.com/gb/app/moneybox-save-and-invest/id1049797239 | IOS | Yes | - | |
| https://play.google.com/store/apps/details?id=com.moneyboxapp | ANDROID | Yes | ||
| https://sycamore.moneyboxapp.org | URL | Yes |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| - Any reports relating to improper authorization / information disclosure on api.moneyboxapp.com through /investment/payments/GetGiftUser/{code} and PII leak or sensitive data exposure is out of scope as this was intended by design. | OTHER | Yes | |
| All domains or subdomains not listed in the above list of 'Scopes' | OTHER | Yes |