Uber · Report #128853
Information disclosure at lite.uber.com
Informativestatus
2upvotes
13 Jun 2016disclosed
How it was found
Hello!
- At https://lite.uber.com/auth/login I get 302-redirect to https://login.uber.com.
- After post my email and password I get callback to https://lite.uber.com/auth/callback?code=efopqUAx2uwMOqJafHGj2OP8yNxXkf#_
- At this page we can see trace stack with names of nodejs modules, full path disclose...
File attached.
Best Wishes!