Uber · Report #177551
SMS/Call spamming due to truncated phone number
Validstatus
lowseverity
14upvotes
13 Nov 2018disclosed
Summary
Due to improperly validation of phone numbers during the Android Rider sign-up, it was possible to spam a phone number with verification calls and texts. By inputting an 11 or 12 digit phone number, it would be truncated to 10 digits, resulting in the same number from varying inputs.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.