Uber · Report #149679
Subdomain takeover of translate.uber.com, de.uber.com and fr.uber.com
Validstatus
21upvotes
25 Jul 2016disclosed
Summary
Limited disclosure at @rojanr's request
Subdomains including translate.uber.com, fr.uber.com and de.uber.com were pointing to a CNAME for a site that was not claimed. I was able to claim the site and add any content. For PoC purposes, I showcased my blog on translate.uber.com and de.uber.com.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.