Uber · Report #125000

Open Redirect in m.uber.com

Validstatus

$500bounty

9upvotes

27 Sept 2016disclosed

Summary

open redirect in m.uber.com

Reproduction Steps: https://m.uber.com//youtube.com/%2F..

HTTP Response:

HTTP/1.1 303 See Other
...
Location: //youtube.com/%2F../

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original