{"id":"84b7e0a4-cfd3-4718-a398-c61997c63283","engagementId":"604f159b-c3c8-42aa-a093-5ae238baa3a8","data":{"brief":{"id":"ddab3dfc-b5d3-4a4b-99a2-ed0c6b581c5a","name":"Allstate Vulnerability Disclosure Program","tagline":"At Allstate, we're advocates for peace of mind and a good life. And that comes through in everything we do. Please submit your findings to this Vulnerability Disclosure Program.","description":"\u003cp\u003eThank you for taking interest in the security of Allstate and our customers. To protect our digital ecosystem, we’ve created this page to allow security researchers from around the world to report any potential security issues they may have found. \u003c/p\u003e\n\n\u003cp\u003ePlease note that this Policy does not include monetary rewards. \u003c/p\u003e\n\n\u003cp\u003eOur commitment to you: \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eMaintain trust and confidentiality in our exchanges with researchers who report to the program. \u003c/li\u003e\n\u003cli\u003eTo treat everyone who contributes with respect. \u003c/li\u003e\n\u003cli\u003eTo work with you to validate and remediate reported vulnerabilities. \u003c/li\u003e\n\u003cli\u003eTo investigate and remediate issues in a manner consistent with protecting the safety and security of both on-prem and cloud customers. Addressing a valid reported vulnerability will take time. This will vary based on the severity of the vulnerability and the affected systems. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eOur ask of you: \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eMutual trust. As we offer safe harbor to our researchers (details below), we ask that you do not disclose any information regarding your submission’s details without written permission from our team. \u003c/li\u003e\n\u003cli\u003ePlease provide as much information as possible in your submission. It is vital to provide clear reproduction steps regarding your finding so that we may validate the report in a timely manner. \u003c/li\u003e\n\u003cli\u003eAdhere to the out-of-scope section below. \u003c/li\u003e\n\u003cli\u003ePlease make sure to add your email address to the submission, so we can get in touch with you about any technical details as needed. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eAll communication with researchers will be conducted within the Bugcrowd Platform. To protect you and our customers, we will not communicate with researchers outside of Bugcrowd, except to direct them to the Bugcrowd platform. \u003c/p\u003e\n\n\u003cp\u003ePlease remember to include as much information as possible, in a clear manner, to help facilitate validation. It is highly recommended that you provide your email address to ensure you can claim your submission and continue communication as needed. \u003c/p\u003e","industryTagId":"02370343-bf13-4661-a7a2-caa1c1076ad1","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Allstate not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Allstate, you can report it to this program. However, be aware that it is ineligible for rewards or points-based compensation.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eTesting the physical security of our offices, employees, equipment, etc. \u003c/li\u003e\n\u003cli\u003eConducting non-technical attacks such as social engineering or phishing attacks. \u003c/li\u003e\n\u003cli\u003eDoS/DDoS or any other testing that would impact the operation of our systems. \u003c/li\u003e\n\u003cli\u003eAccessing, downloading, or modifying data residing in an account that does not belong to you. \u003c/li\u003e\n\u003cli\u003eTesting that would result in sending spam or other unsolicited messages. \u003c/li\u003e\n\u003cli\u003eTesting third party applications or services. \u003c/li\u003e\n\u003cli\u003eDefacing any of our assets. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"2ee48994-b854-4e8e-b362-b8265e20a688","name":"In Scope","targets":[{"id":"46cc7d60-7f39-49dd-ae0a-30246b2d78d0","uri":"","name":"squaretrade.co.jp","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f74ad8aa-5dfc-4367-8c72-39dd0e6577a4","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"870f28df-f268-491e-9c6a-6112a64dc8a9","uri":"https://allstatedealerservices.com/","name":"Allstatedealerservices.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"01331e95-e399-4a13-a3f7-ae9b9d816271","sortOrder":0},"sortOrder":0,"tags":[{"id":"29ad39e7-82e8-4428-8474-fdfb5ceeb8d5","name":"Cloudflare CDN","targetId":"870f28df-f268-491e-9c6a-6112a64dc8a9"},{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"870f28df-f268-491e-9c6a-6112a64dc8a9"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"870f28df-f268-491e-9c6a-6112a64dc8a9"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"870f28df-f268-491e-9c6a-6112a64dc8a9"}],"recentChangeFlags":null},{"id":"94df5529-f726-4fa1-9caa-1813aea86de5","uri":"https://www.answerfinancial.com/","name":"Answerfinancial.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c6c9ca89-4e0d-46de-97dd-14ff14cc2d17","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"94df5529-f726-4fa1-9caa-1813aea86de5"},{"id":"3585ef4a-cd09-429b-ad25-5777064e59c5","name":"Moment.js","targetId":"94df5529-f726-4fa1-9caa-1813aea86de5"},{"id":"6481be19-8d64-4bb2-8426-2f1f7afe32e6","name":"Modernizr","targetId":"94df5529-f726-4fa1-9caa-1813aea86de5"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"94df5529-f726-4fa1-9caa-1813aea86de5"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"94df5529-f726-4fa1-9caa-1813aea86de5"}],"recentChangeFlags":null},{"id":"54c7df05-2074-4058-a6c3-d1b451cc5f59","uri":"https://availcarsharing.com/","name":"Availcarsharing.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"58261cac-de48-4ba9-b910-4ef75bce4c67","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"54c7df05-2074-4058-a6c3-d1b451cc5f59"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"54c7df05-2074-4058-a6c3-d1b451cc5f59"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"54c7df05-2074-4058-a6c3-d1b451cc5f59"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"54c7df05-2074-4058-a6c3-d1b451cc5f59"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"54c7df05-2074-4058-a6c3-d1b451cc5f59"}],"recentChangeFlags":null},{"id":"9ca745dc-0c2b-4bb9-bcdd-6c8f3863e73d","uri":"https://www.squaretrade.com/","name":"Squaretrade.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"44d0bd81-0f3e-4917-b2ea-569de355fa76","sortOrder":0},"sortOrder":0,"tags":[{"id":"3a3487a7-9abf-45f0-8057-51dabed20371","name":"Drupal","targetId":"9ca745dc-0c2b-4bb9-bcdd-6c8f3863e73d"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"9ca745dc-0c2b-4bb9-bcdd-6c8f3863e73d"},{"id":"803518dc-5ae1-4e48-8de4-5b61b42a6bd0","name":"Amazon S3","targetId":"9ca745dc-0c2b-4bb9-bcdd-6c8f3863e73d"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"9ca745dc-0c2b-4bb9-bcdd-6c8f3863e73d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9ca745dc-0c2b-4bb9-bcdd-6c8f3863e73d"}],"recentChangeFlags":null},{"id":"733d55f7-bb15-4fc7-a8e6-c9b71d0d1782","uri":"https://www.allstateindia.com/","name":"Allstateindia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7a3c4783-3fd1-4a56-b4fc-45f673f53f1e","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"733d55f7-bb15-4fc7-a8e6-c9b71d0d1782"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"733d55f7-bb15-4fc7-a8e6-c9b71d0d1782"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"733d55f7-bb15-4fc7-a8e6-c9b71d0d1782"}],"recentChangeFlags":null},{"id":"c8ac91c2-6642-47f2-8135-37f77905ac3c","uri":"https://www.allstateni.com/","name":"Allstateni.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"784b9153-5222-4cd4-aa18-474bb2114ead","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"c8ac91c2-6642-47f2-8135-37f77905ac3c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"c8ac91c2-6642-47f2-8135-37f77905ac3c"}],"recentChangeFlags":null},{"id":"0c4a56e9-a3e1-4746-b98c-ecb01ed4090a","uri":"https://www.leadcloud.us/","name":"Leadcloud.us","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"962c3b85-272a-4511-986a-0de3adc33fb2","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"0c4a56e9-a3e1-4746-b98c-ecb01ed4090a"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"0c4a56e9-a3e1-4746-b98c-ecb01ed4090a"},{"id":"a5bf7fc5-03c4-42f4-b10d-5ceb23d1c064","name":"Lodash","targetId":"0c4a56e9-a3e1-4746-b98c-ecb01ed4090a"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0c4a56e9-a3e1-4746-b98c-ecb01ed4090a"}],"recentChangeFlags":null},{"id":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4","uri":"https://www.allstate.jobs/","name":"www.allstate.jobs","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fe3980d0-ab41-4eee-958c-d3dd3623749f","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4"},{"id":"a5bf7fc5-03c4-42f4-b10d-5ceb23d1c064","name":"Lodash","targetId":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4"},{"id":"ce8ff3cd-4d54-4404-8321-6351781551a3","name":"Vue.js","targetId":"1e4f9b6c-1409-4be9-b3d0-68e6a05f5bb4"}],"recentChangeFlags":null},{"id":"48ff5ae5-7cc5-4403-825f-e32d85ff0c68","uri":"https://myallstateflood.com/","name":"myallstateflood.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f7d83022-071b-43b4-9146-316dd920ea12","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"48ff5ae5-7cc5-4403-825f-e32d85ff0c68"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"48ff5ae5-7cc5-4403-825f-e32d85ff0c68"}],"recentChangeFlags":null},{"id":"9b7b363e-e302-473d-908e-7db514561cce","uri":"","name":"squaretrade.eu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b4847ce1-bfce-4b01-988b-d189dec94ce0","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"4c12b3e4-ae8e-44c9-b416-62df227c08fa","uri":"","name":"*allstate.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d6131562-f276-4a13-bf3e-3b2477ccdb02","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4c12b3e4-ae8e-44c9-b416-62df227c08fa"}],"recentChangeFlags":null},{"id":"ba6f2ea7-54a4-4190-b405-21d22fca832a","uri":"https://nationalgeneral.com/","name":"Nationalgeneral.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ee0ab350-bc77-4875-bd1a-0a13a43c366d","sortOrder":0},"sortOrder":0,"tags":[{"id":"32a00682-97f0-4d01-852d-f06359bdc440","name":"Bootstrap","targetId":"ba6f2ea7-54a4-4190-b405-21d22fca832a"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"ba6f2ea7-54a4-4190-b405-21d22fca832a"},{"id":"b6333057-ce1f-4205-bcb6-ce56be83543b","name":"Microsoft IIS","targetId":"ba6f2ea7-54a4-4190-b405-21d22fca832a"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ba6f2ea7-54a4-4190-b405-21d22fca832a"}],"recentChangeFlags":null},{"id":"57a2a51c-a824-404e-ab90-ad76c5fbfc45","uri":"https://www.allstateidentityprotection.com/","name":"Allstateidentityprotection.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9d18574a-bb2e-46f1-9e72-f6be099d3985","sortOrder":0},"sortOrder":0,"tags":[{"id":"624f911d-7e8c-4d56-b523-e7416c1cc319","name":"NextJS","targetId":"57a2a51c-a824-404e-ab90-ad76c5fbfc45"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"57a2a51c-a824-404e-ab90-ad76c5fbfc45"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57a2a51c-a824-404e-ab90-ad76c5fbfc45"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"57a2a51c-a824-404e-ab90-ad76c5fbfc45"}],"recentChangeFlags":null},{"id":"44160bcc-1911-4e0f-8316-f034a84530c6","uri":"https://www.esurance.com/","name":"esurance.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1a6d9bde-59fd-42a8-829c-1da90f0fa333","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"44160bcc-1911-4e0f-8316-f034a84530c6"},{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"44160bcc-1911-4e0f-8316-f034a84530c6"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"44160bcc-1911-4e0f-8316-f034a84530c6"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"44160bcc-1911-4e0f-8316-f034a84530c6"}],"recentChangeFlags":null},{"id":"4052082f-1bce-4fc8-8c93-5a67a1f4c4d6","uri":"https://www.ivantageinsurance.ca/","name":"Ivantageinsurance.ca","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"160840c1-a118-489e-9b09-1400b43145ed","sortOrder":0},"sortOrder":0,"tags":[{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"4052082f-1bce-4fc8-8c93-5a67a1f4c4d6"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"4052082f-1bce-4fc8-8c93-5a67a1f4c4d6"},{"id":"b6333057-ce1f-4205-bcb6-ce56be83543b","name":"Microsoft IIS","targetId":"4052082f-1bce-4fc8-8c93-5a67a1f4c4d6"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4052082f-1bce-4fc8-8c93-5a67a1f4c4d6"}],"recentChangeFlags":null},{"id":"2e8f089c-012f-48e6-822f-c4d04c8b5d64","uri":"https://arity.com/","name":"Arity.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8337a072-35fb-470e-bbcc-55234ebd87fa","sortOrder":0},"sortOrder":0,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"2e8f089c-012f-48e6-822f-c4d04c8b5d64"},{"id":"5644ab16-c7ca-4ff7-ac95-383343dab77f","name":"MySQL","targetId":"2e8f089c-012f-48e6-822f-c4d04c8b5d64"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"2e8f089c-012f-48e6-822f-c4d04c8b5d64"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"2e8f089c-012f-48e6-822f-c4d04c8b5d64"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2e8f089c-012f-48e6-822f-c4d04c8b5d64"}],"recentChangeFlags":null},{"id":"ecc464d8-c489-445f-a55b-1be7a82ffdb7","uri":"https://www.encompassinsurance.com/","name":"Encompassinsurance.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e7bb017a-e818-4cda-b463-6a53ac6c1129","sortOrder":0},"sortOrder":0,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"ecc464d8-c489-445f-a55b-1be7a82ffdb7"},{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"ecc464d8-c489-445f-a55b-1be7a82ffdb7"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"ecc464d8-c489-445f-a55b-1be7a82ffdb7"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ecc464d8-c489-445f-a55b-1be7a82ffdb7"}],"recentChangeFlags":null},{"id":"5ac5058a-71d8-49d4-b37e-f3f664642b69","uri":"https://allstateinvestments.com/","name":"Allstateinvestments.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"eed159f3-dfd1-4dba-8faa-8e66e9a43109","sortOrder":0},"sortOrder":0,"tags":[{"id":"9f26f47e-4acd-4d8d-aad2-414b6b367eb0","name":"Handlebars","targetId":"5ac5058a-71d8-49d4-b37e-f3f664642b69"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"5ac5058a-71d8-49d4-b37e-f3f664642b69"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5ac5058a-71d8-49d4-b37e-f3f664642b69"}],"recentChangeFlags":null},{"id":"cdb0797f-c7fb-4f29-a692-dabea6a40303","uri":"https://www.allstate.ca/","name":"https://www.allstate.ca/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fcc2f47a-573b-4328-81ee-b469a81a50d7","sortOrder":19},"sortOrder":19,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"cdb0797f-c7fb-4f29-a692-dabea6a40303"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"cdb0797f-c7fb-4f29-a692-dabea6a40303"}],"recentChangeFlags":null},{"id":"413b5675-8045-4696-b78a-ddbf66a519d6","uri":"https://apps.allstate.ca/quickquote/common/landing.aspx#b","name":"https://apps.allstate.ca/quickquote/common/landing.aspx#b","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5280716c-84c9-4335-bf9b-18bc5ec8a145","sortOrder":20},"sortOrder":20,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"413b5675-8045-4696-b78a-ddbf66a519d6"}],"recentChangeFlags":null},{"id":"143c0947-6096-4083-9c83-2c57c3c1d54a","uri":"https://apps.allstate.ca/chinese/","name":"https://apps.allstate.ca/chinese/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"824ae8bb-bc57-4a92-b250-d9f6b20bc9fd","sortOrder":21},"sortOrder":21,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"143c0947-6096-4083-9c83-2c57c3c1d54a"}],"recentChangeFlags":null},{"id":"a0dcbf44-2afd-4e43-974f-de12e459dda1","uri":"https://consumer.pafco.ca/paymybill/","name":"https://consumer.pafco.ca/paymybill/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"50ba00a7-01ac-4b0a-a730-1bf39d379377","sortOrder":22},"sortOrder":22,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a0dcbf44-2afd-4e43-974f-de12e459dda1"}],"recentChangeFlags":null},{"id":"cbcea507-958d-4756-9c85-115a8b8b563d","uri":"https://consumer.pembridge.com/paymybill/","name":"https://consumer.pembridge.com/paymybill/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2eb0cb42-21c5-4188-9942-1f4a839ece42","sortOrder":23},"sortOrder":23,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cbcea507-958d-4756-9c85-115a8b8b563d"}],"recentChangeFlags":null},{"id":"859b0e97-8d4a-4d62-9a7c-9fbcca252928","uri":"https://apps.allstate.ca/myallstate/login?lang=en","name":"https://apps.allstate.ca/myallstate/login?lang=en","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8870325c-8b57-49cc-9a6a-dfecd6caab9b","sortOrder":24},"sortOrder":24,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"859b0e97-8d4a-4d62-9a7c-9fbcca252928"}],"recentChangeFlags":null},{"id":"2eb76444-14a0-4b2b-92af-a7f7b3475132","uri":"http://allstate.smartsimple.biz/","name":"http://allstate.smartsimple.biz/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f0e4dc78-fcf0-4cca-890f-a6a5cb334f6f","sortOrder":25},"sortOrder":25,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2eb76444-14a0-4b2b-92af-a7f7b3475132"}],"recentChangeFlags":null},{"id":"af5e4893-fc56-40c9-9a32-da15f8eb0408","uri":"https://broker.pembridge.com/thePath","name":"https://broker.pembridge.com/thePath","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7d0d5a1f-5b09-445b-a06c-e41b10324990","sortOrder":26},"sortOrder":26,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"af5e4893-fc56-40c9-9a32-da15f8eb0408"}],"recentChangeFlags":null},{"id":"110fa4c2-dd94-4f24-bbda-9e0cfc507a13","uri":"http://www.pafco.ca/","name":"http://www.pafco.ca/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6a99092c-3ba3-4f3f-a5fa-03a969ef65c9","sortOrder":27},"sortOrder":27,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"110fa4c2-dd94-4f24-bbda-9e0cfc507a13"}],"recentChangeFlags":null},{"id":"80a01dd4-5f29-48f2-9cb4-02b3709fd11a","uri":"https://www.pembridge.com/","name":"https://www.pembridge.com/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4fe767c5-7778-4f71-892a-1d32eb2b972c","sortOrder":28},"sortOrder":28,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"80a01dd4-5f29-48f2-9cb4-02b3709fd11a"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"a585937a-3432-4bea-b629-b415b0a18150","name":"Out of Scope","targets":[{"id":"67146502-d645-4466-a14c-30576dbbdee9","uri":"","name":"allstatefoundation.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d83a3196-3285-4f41-9bf6-797570ca4320","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"710d0843-926c-4410-bb3d-61f0eb5bea4b","uri":"","name":"allstatefoundation.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7a69a9a4-4aa9-4c89-92f5-11576dca09c7","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"604f159b-c3c8-42aa-a093-5ae238baa3a8","code":"allstate-vdp-pro","state":"in_progress","endsAt":null,"bountyId":"11487c96-4ade-4357-84ac-edfd4957ec29","startsAt":"2023-11-28T20:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Computer Software","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/5242/c90e/f8b4ffbc/126419827eee8a16a1037a7b63912890_1600460945136.jpeg","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2023-11-28T20:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/allstate-vdp-pro","changelogs":"/engagements/allstate-vdp-pro/changelog","submissions":null,"announcements":"/engagements/allstate-vdp-pro/announcements","hallOfFame":"/engagements/allstate-vdp-pro/hall_of_fames","crowdstream":"/engagements/allstate-vdp-pro/crowdstream"},"announcementsCount":2,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/allstate-vdp-pro/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=allstate-vdp-pro\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/allstate-vdp-pro/engagement_subscribers","engagementChangelogsUrl":"/engagements/allstate-vdp-pro/changelog","publishedAt":"2024-09-18T18:00:24.626Z","engagementChangelogUrl":"/engagements/allstate-vdp-pro/changelog/84b7e0a4-cfd3-4718-a398-c61997c63283","createUserFeedbacksUrl":"/engagements/allstate-vdp-pro/feedbacks","engagementCrowdstreamUrl":"/engagements/allstate-vdp-pro/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}