Uber · Report #126364
Uber password reset link EMAIL FLOOD
Duplicatestatus
3upvotes
13 Jun 2016disclosed
How it was found
Step to reproduce Uber password reset link EMAIL FLOOD POC Video https://youtu.be/PPJkO_Eo6Mw
- Used OWSAP ZAP Proxy
- Generated the forgotten password Link of my account ([email protected])
- Used ZAP to replay the packet
- The Number of replay resulting into number of password link email which causing the USER Inbox to flood with UBER SCAM
- Attaching the POC as Video https://youtu.be/PPJkO_Eo6Mw