HexBrain

Uber · Report #127918

Easy spam with USE My PHONE Feature

Validstatus
$250bounty
1upvotes
13 Jun 2016disclosed

How it was found

By this Bug we can easily spam anyone's phone with Uber Sms

We just need to use his/her phone number while registration and Open https://partners.uber.com/dashboard/documents/ so we have 2 option 1st is upload and 2nd is Send Sms on phone so we can spam anyone's phone by using sms feature you should use phone number verification process or sms limit in one day Thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original