Expedia Group Bug Bounty

At a glance#

• Bounties: Yes
• Swag: No
• Managed by the platform: Yes
• Average first response: 0.5 days
• Average time to resolution: 444.5 days

In scope#

• *.carrentals.com
• *.cheaptickets.com
• *.expediapartnercentral.com
• *.lastminute.co.nz
• *.lastminute.com.au
• *.travelocity.ca
• *.travelocity.com
• *.vrbo.com
• *.wotif.com
• 1245772818
• 284803487
• 284971959
• 403546234
• 427916203
• 483394780
• 531549799
• 566635048
• 880759727
• 987675995
• com.cheaptickets
• com.ebookers
• com.expedia.bookings
• com.expediapartnercentral
• com.hcom.android
• com.hotwire.hotels
• com.orbitz
• com.travelocity.android
• com.vrbo.android
• com.wotif.android
• www.abritel.fr
• www.bookabach.co.nz
• www.carrentals.com
• www.cheaptickets.com
• www.ebookers.com
• www.ebookers.fi
• www.expedia-aarp.com
• www.expedia.com
• www.expediagroup.com
• www.expediataap.com
• www.fewo-direkt.de

13 more assets on the official page.

Out of scope#

• *.expediacruises.com
• bookus.expediacruises.com
• https://*.expedia.com/
• www.expediaagents.com
• www.expediapartnersolutions.com

Imported from the public directory. Always confirm scope on the official program page before testing.