Uber · Report #125003
Open Redirect in riders.uber.com
Validstatus
lowseverity
$500bounty
10upvotes
20 Nov 2018disclosed
Summary
There was an open redirect on riders.uber.com which would have made it possible for an attacker to redirect a victim through to another arbitrary site without user interaction.
Thanks, @bobrov!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.