Uber · Report #708081
Reflected XSS on https://www.uber.com
Validstatus
mediumseverity
$1,000bounty
37upvotes
24 Feb 2021disclosed
Summary
The endpoint https://www.uber.com/en-NZ/blog/ is vulnerable to reflected XSS on the URL path.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.