Uber · Report #1137819
IDOR leads to See analytics of Loyalty Program in any restaurant.
Validstatus
mediumseverity
112upvotes
28 May 2021disclosed
Summary
Improper authorization allowed for disclosure any restaurant's analytics of the Loyalty Program on 3 endpoints.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.