Skip to content
BackEsc
Sign in

Uber · disclosed reports

Cross-site Scripting

49 disclosed reports · $59,250 paid

Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.

Open Uber on HackerOne
reports
49
paid a bounty
20

Every one of the 49 is a mark on the map. Named now: 1 to 26, most upvoted first.

  1. XSS At "pages.et.uber.com"#156098Uber · 267 votes
  2. Stored XSS in developer.uber.com#131450Uber · $7,500 · 223 votes
  3. [First 30] Stored XSS on login.uber.com/oauth/v2/authorize via redirect_uri parameter#392106Uber · $3,000 · 131 votes
  4. Stored XSS on any page in most Uber domains#217739Uber · $6,000 · 107 votes
  5. xss in https://www.uber.com#145278Uber · 64 votes
  6. Unrestricted File Upload Results in Cross-Site Scripting Attacks#1005355Uber · 58 votes
  7. [manage.jumpbikes.com] Blind XSS on Jump admin panel via user name#472470Uber · 54 votes
  8. Stored XSS on auth.uber.com/oauth/v2/authorize via redirect_uri parameter leads to Account Takeover#397497Uber · $3,000 · 52 votes
  9. Possibility to inject a malicious JavaScript code in any file on tags.tiqcdn.com results in a stored XSS on any page in most Uber domains#256152Uber · $6,000 · 51 votes
  10. Reflected XSS on multiple uberinternal.com domains#326449Uber · $2,000 · 41 votes
  11. DOM based XSS via insecure parameter on [ https://uberpay-mock-psp.uber.com ]#1767151Uber · 39 votes
  12. Reflected XSS in lert.uber.com#191810Uber · 39 votes
  13. Reflected XSS on https://www.uber.com#708081Uber · $1,000 · 37 votes
  14. Stored XSS on developer.uber.com via admin account compromise#152067Uber · $5,000 · 37 votes
  15. HTML injection via insecure parameter [https://www.ubercarshare.com/]#1790444Uber · 35 votes
  16. Reflected XSS on developer.uber.com via Angular template injection#125027Uber · $3,000 · 35 votes
  17. Reflected XSS POST method at partners.uber.com#129582Uber · $3,000 · 31 votes
  18. XSS @ love.uber.com#117068Uber · 21 votes
  19. XSS on partners.uber.com due to no user input sanitisation#281283Uber · $1,000 · 18 votes
  20. Stored XSS on newsroom.uber.com admin panel / Stream WordPress plugin#127948Uber · $5,000 · 18 votes
  21. Reflected XSS in https://eng.uberinternal.com and https://coeshift.corp.uber.internal/#354686Uber · $500 · 16 votes
  22. xss vulnerability in http://ubermovement.com/community/daniel#142946Uber · 14 votes
  23. XSS in ubermovement.com via editable Google Sheets#193799Uber · $2,000 · 11 votes
  24. Reflected XSS on Uber.com careers#117190Uber · 8 votes
  25. Stored XSS in drive.uber.com WordPress admin panel#126099Uber · $2,000 · 7 votes
  26. Reflected XSS via Livefyre Media Wall in newsroom.uber.com#134061Uber · $2,000 · 6 votes

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in