Uber · Report #126070
Open redirect on rush.uber.com, business.uber.com, and help.uber.com
Validstatus
lowseverity
10upvotes
13 Nov 2018disclosed
Summary
@4lemon reported open redirects on rush.uber.com, business.uber.com, and help.uber.com which would have made it possible for an attacker to redirect a victim through to another arbitrary site without user interaction.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.