Grab · Report #307050
Leak ██████████ information in real time through API request
Validstatus
highseverity
$3,000bounty
103upvotes
3 Feb 2018disclosed
Summary
The researcher identified an endpoint that was publicly accessible and contained minuscule amount of sensitive information with some dummy data. We quickly resolved the issue and rewarded the researcher.
We are thankful to @severus for his continued contribution to our bug bounty program to keep Grab safe.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.