Brute Forcing rider-view Endpoint Allows for Counting Number of Active Uber Drivers #127025 Informative Information Disclosure – 2016-06-13 – 1 Estimation of a Lower Bound on Number of Uber Drivers via Enumeration #125488 Valid Information Disclosure – 2016-08-24 $500 2 Disclosure of ip addresses in local network of uber #126569 Informative Information Disclosure – 2016-06-13 – 2 Enumerating userIDs with phone numbers #128723 Duplicate Information Disclosure – 2016-06-11 – 2 Information disclosure at lite.uber.com #128853 Informative Information Disclosure – 2016-06-13 – 2 Server version disclosure: team.uberinternal.com #146327 Informative Information Disclosure – 2016-07-07 – 2 User Enumeration and Information Disclosure #155578 Informative Information Disclosure – 2016-08-12 – 2 Information Disclosure on lite.uber.com #133375 Informative Information Disclosure – 2016-07-07 – 3 Phone Number Enumeration #138881 Informative Information Disclosure – 2016-07-07 – 3 Disclosure of Co-Rider user (Uber-pooling) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE #789803 Valid Information Disclosure Low 2021-02-25 – 3 LIsting of http://archive.uber.com/pypi/simple/ #125068 Informative Information Disclosure – 2016-03-24 – 4 Disclosure of ways to the site root #129027 Informative Information Disclosure – 2016-06-13 – 4 reopen #128853 (Information disclosure at lite.uber.com) #129712 N/A Information Disclosure – 2016-07-26 – 5 Requested and received edit access to Google form #130440 Valid Information Disclosure – 2016-07-26 – 5 lert.uber.com: Few default folders/files of AURA Framework are accessible #195205 Valid Information Disclosure – 2018-12-19 – 5 [experience.uber.com] Node.js source code disclosure & anonymous access to internal Uber documents, templates and tools #389078 Valid Information Disclosure – 2021-02-23 – 5 CSV Injection in business.uber.com #126109 Valid Information Disclosure – 2016-04-06 $1,000 6 ability to retrieve a user's phone-number/email for a given inviteCode #178503 Valid Information Disclosure – 2017-05-17 – 6 stack trace exposed on https://receipts.uber.com/ #204568 Informative Information Disclosure – 2021-02-25 – 8 Information Leak - GitHub - Endpoint Configuration Details #378558 Valid Information Disclosure – 2018-08-27 – 8 Google Maps API Key Leakage #1321830 Informative Information Disclosure None 2021-09-03 – 8 Listing of email addresses of whitelisted business users visible at business.uber.com #125246 Valid Information Disclosure – 2021-02-25 $250 9 Bulk UUID enumeration via invite codes #145150 Valid Information Disclosure – 2016-09-08 – 12 Lack of CNAME/A Record Trimming Pointing Uber Domains to Insecure Non-Uber AWS Instances/Sites #125118 Valid Information Disclosure – 2016-07-13 – 13 Lack of rate limiting on get.uber.com leads to enumeration of promotion codes and estimation of a lower bound on the number of Uber drivers #125200 Valid Information Disclosure – 2016-08-12 $3,000 13 Server version disclosure #149483 Informative Information Disclosure – 2016-07-07 – 13 Full path disclosure on track.uber.com #125197 Valid Information Disclosure – 2018-11-20 $100 14 Exposed Golang Pprof debugger at https://cn-geo1.uber.com/ #1385906 Valid Information Disclosure Low 2022-04-07 – 14 Information regarding trips from other users #127161 Valid Information Disclosure – 2016-07-12 – 15 Missing authorization checks leading to the exposure of ubernihao.com administrator accounts #154762 Valid Information Disclosure – 2016-08-15 – 15 Uber employees are sharing information on productforums.google.com #344086 Valid Information Disclosure – 2021-02-25 – 16 Golang expvar Information Disclosure #1650035 Valid Information Disclosure Low 2022-08-24 – 16 Possible to View Driver Waybill via Driver UUID #127087 Valid Information Disclosure – 2016-06-14 – 24 Exposed█████████in apk file - devbuilds.uber.com #848905 Valid Information Disclosure High 2021-04-09 – 28 API on campus-vtc.com allows access to ~100 Uber users full names, email addresses and telephone numbers. #580268 Valid Information Disclosure High 2021-07-08 $750 35 phone number exposure for riders/drivers given email/uuid #225243 Valid Information Disclosure – 2017-06-02 – 36 Critical Information disclosure of rtapi token for any user via https://video-support-staging.uber.com/video/api/getPopulousUser #953649 Valid Information Disclosure Critical 2021-03-29 – 49 Open AWS S3 bucket at ubergreece.s3.amazonaws.com exposes confidential internal documents and files #361438 Valid Information Disclosure – 2021-03-12 $500 70 Possibility to get private email using UUID Analysed #127158 Valid Information Disclosure – 2016-06-15 – 82 private passenger information is exposed to the Uber Driver app during ride dispatch ("Ping") events Analysed #174404 Valid Information Disclosure – 2021-05-14 – 91 ubernycmarketplace.com is vulnerable to the Heartbleed Bug Analysed #304190 Valid Information Disclosure – 2020-04-23 $1,500 112 Client secret, server tokens for developer applications returned by internal API Analysed #419655 Valid Information Disclosure – 2019-02-08 – 125 [Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repo Analysed #591813 Valid Information Disclosure Critical 2021-02-25 $40,000 458 Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameter Analysed #542340 Valid Information Disclosure High 2019-09-09 – 643