Uber · Report #115209
Unauthorized file (invoice) download
Duplicatestatus
3upvotes
15 Jun 2016disclosed
Summary
Due to an access control vulnerability it was possible to download arbitrary invoices if you had the invoice's UUID. This bug was found internally by the Uber security team previously, so it was closed as a Duplicate.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.