Uber · Report #1116545
4 Subdomains Takeover on 2 domains ( muberscolombia.com & ubereats.pl )
Validstatus
mediumseverity
$500bounty
29upvotes
29 Apr 2021disclosed
Summary
The host at https://muberscolombia.com/ and http://sklep.ubereats.pl/ had a dangling record pointing to unclaimed Wix and Shoplo assets. The hacker registered the latter, and claimed ownership of the resource.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.