Uber · Report #174404

private passenger information is exposed to the Uber Driver app during ride dispatch ("Ping") events

Validstatus

mediumseverity

91upvotes

14 May 2021disclosed

Summary

This report highlighted that the Uber Driver app did not anonymize the last name and phone number of the rider.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original