Uber · Report #530441
Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system.
Validstatus
lowseverity
$4,500bounty
210upvotes
6 Mar 2021disclosed
Summary
A website operated by an Uber vendor, allowed any unauthenticated user to access pages within the site. Due to the site's purpose, this vulnerability could expose sensitive information.
This was a interesting vulnerability as the site did not have any sensitive information that I could find, but clearly it had the potential for it.
Check out my blog https://healdb.tech/blog/ or my Twitter https://twitter.com/heald_ben for some Bug Bounty tool releases and blogs!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.