Uber · Report #1385906
Exposed Golang Pprof debugger at https://cn-geo1.uber.com/
Validstatus
lowseverity
14upvotes
7 Apr 2022disclosed
Summary
The Golang pprof debug interface was exposed on an Uber endpoint. This allowed introspection of stack traces, application timing, command line parameters and memory usage.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.