Some of the applications that are in our scope use our old api.
If you find a bug on this api and it is from a product that is in scope, it is valid.
An application that makes it possible for developers to do a limited test of sending messages using the CM.COM business messaging API.
What we would like to know is:
* Can the application be exploited to allow sending more than the allowed number of messages?
* Can the app be exploited to send to other recipients besides the whitelisted recipients?
Login to your account and go to https://www.cm.com/en-gb/app/ticketing/
From here you can create tickets and much more!
Make sure to take a look at the user-side ticket store as well (https://store.ticketing.cm.com/..)