Uber · Report #127161
Information regarding trips from other users
Validstatus
15upvotes
12 Jul 2016disclosed
Summary
Limited Disclosure at @maluko's request
In this vulnerability it was possible to view information about other users trips by changing the token for an UUID.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.