HexBrain

Uber · Report #128853

Information disclosure at lite.uber.com

Informativestatus
2upvotes
13 Jun 2016disclosed

How it was found

Hello!

  1. At https://lite.uber.com/auth/login I get 302-redirect to https://login.uber.com.
  2. After post my email and password I get callback to https://lite.uber.com/auth/callback?code=efopqUAx2uwMOqJafHGj2OP8yNxXkf#_
  3. At this page we can see trace stack with names of nodejs modules, full path disclose...

File attached.

Best Wishes!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original