Latitude Financial Services Bug Bounty

At a glance#

• Maximum payout: $7,500
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://api.test.latitudefinancial.com
• https://master.servicecentre.digitalservicing-np.lfscnp.com/
• https://master.servicecentre-nz.digitalservicing-np.lfscnp.com/
• https://28degreescard.com.au
• https://buyersedge.co.nz
• https://carecredit.com.au
• https://gemcreditline.co.nz
• https://gemfinance.co.nz
• https://gemvisa.com.au
• *.genoapay.co.nz
• *.genoapay.com
• https://gomastercard.com.au
• https://interestfree.com.au
• *.latitudefinancial.co.nz
• *.latitudefinancial.com
• *.latitudefinancial.com.au
• https://latitudeinfinity.com.au
• *.latitudepay.com.au
• *.latitudepay.com
• https://umiloans.com.au
• https://images.latitudepayapps.com/
• https://app.latitudepayapps.com/
• *.test.*.lfscnp.com
• *.dev.*.lfscnp.com
• *.sandbox.*.lfscnp.com
• *.-np.*.lfscnp.com

Out of scope#

• https://investors.latitudefinancial.com.au
• https://auth.latitudefinancial.com
• https://auth.*.latitudefinancial.com
• *.latitudefs.com
• https://*.my.latitudepay.com/
• https://*.sg.latitudepay.com/
• https://my.latitudepay.com
• https://sg.latitudepay.com
• https://t.latitudefinancial.com/*
• https://p.latitudefinancial.com
• https://payments.latitudefinancial.com/hosted/*,https://payments.latitudefinancial.com/embed/*,https://payments-api.lati...

Imported from the public directory. Always confirm scope on the official program page before testing.