Uber · Report #125197
Full path disclosure on track.uber.com
Validstatus
lowseverity
$100bounty
14upvotes
20 Nov 2018disclosed
Summary
The page at track.uber.com had verbose stack traces enabled, allowing an attacker to learn information about the libraries, technologies and system information used in Uber Rush.
Thanks, @firs0v!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.