HexBrain

Uber · Report #130521

Unsubscribe any user from receiving email

Informativestatus
3upvotes
13 Jun 2016disclosed

How it was found

hi,

At url https://www.uber.com/unsubscribe you can unsubscribe any email of any user, which is bit of concern for the people who wants to receive emails from uber.

only people who gets email from uber should be allowed to unsubscribe themselves from uber emails rather than anybody unsubscribing anyone

Regards Ashish

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original