XSS on love.uber.com #125179 Duplicate Cross-site Scripting – 2016-05-09 – 1 Cross-site Scripting (XSS) #126049 Valid Cross-site Scripting – 2016-05-06 – 1 XSS In archive.uber.com Due to Mime Sniffing in IE #126197 Valid Cross-site Scripting – 2016-04-06 $750 1 Stored self-XSS at m.uber.com #134124 Valid Cross-site Scripting – 2016-07-08 – 1 Self-XSS in Partners Profile #145289 Duplicate Cross-site Scripting – 2016-07-07 – 1 Cross-site Scripting (XSS) autocomplete generation in https://www.uber.com/ #124975 Informative Cross-site Scripting – 2016-03-24 – 2 HTML Escaping Error in the 404 Page on developer.uber.com/docs/ #125130 Valid Cross-site Scripting – 2016-04-06 – 3 Self-XSS on partners.uber.com #138622 Informative Cross-site Scripting – 2016-07-26 – 3 SSL-protected Reflected XSS in m.uber.com #296701 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300080 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300081 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 lite:sess Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300101 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 udi-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300103 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 Dom Based Xss #125498 Valid Cross-site Scripting – 2016-05-09 – 4 XSS via password recovering #131123 Informative Cross-site Scripting – 2016-07-26 – 4 XSS in people.uber.com #140791 Duplicate Cross-site Scripting – 2016-07-26 – 4 XSS on partners.uber.com #42393 Valid Cross-site Scripting – 2016-03-24 $500 5 Self-XSS Vulnerability on Password Reset Form #125059 Duplicate Cross-site Scripting – 2016-06-13 – 5 Stored XSS in archive.uber.com Due to Injection of Javascript:alert(0) #126906 Valid Cross-site Scripting – 2016-05-09 $3,000 5 XSS in uber oauth #131052 Informative Cross-site Scripting – 2016-07-26 – 5 muber-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300102 Duplicate Cross-site Scripting Critical 2017-12-26 – 5 XSS in getrush.uber.com #125112 Valid Cross-site Scripting – 2016-04-06 $3,000 6 Stored Cross Site Scripting [SELF] in partners.uber.com #125503 Informative Cross-site Scripting – 2016-06-13 – 6 Reflected XSS via Livefyre Media Wall in newsroom.uber.com #134061 Valid Cross-site Scripting – 2016-05-09 $2,000 6 Stored XSS in drive.uber.com WordPress admin panel #126099 Valid Cross-site Scripting – 2016-05-14 $2,000 7 Reflected XSS on Uber.com careers #117190 Valid Cross-site Scripting – 2016-04-06 – 8 XSS in ubermovement.com via editable Google Sheets #193799 Valid Cross-site Scripting Medium 2018-12-19 $2,000 11 xss vulnerability in http://ubermovement.com/community/daniel #142946 Valid Cross-site Scripting – 2016-07-21 – 14 Reflected XSS in https://eng.uberinternal.com and https://coeshift.corp.uber.internal/ #354686 Valid Cross-site Scripting Medium 2018-11-13 $500 16 Stored XSS on newsroom.uber.com admin panel / Stream WordPress plugin #127948 Valid Cross-site Scripting – 2016-07-27 $5,000 18 XSS on partners.uber.com due to no user input sanitisation #281283 Valid Cross-site Scripting Low 2018-10-04 $1,000 18 XSS @ love.uber.com #117068 Valid Cross-site Scripting – 2016-05-07 – 21 Reflected XSS POST method at partners.uber.com Analysed #129582 Valid Cross-site Scripting Medium 2019-01-25 $3,000 31 Reflected XSS on developer.uber.com via Angular template injection Analysed #125027 Valid Cross-site Scripting – 2016-04-04 $3,000 35 HTML injection via insecure parameter [https://www.ubercarshare.com/] Analysed #1790444 Valid Cross-site Scripting Medium 2023-03-23 – 35 Stored XSS on developer.uber.com via admin account compromise Analysed #152067 Valid Cross-site Scripting – 2016-08-12 $5,000 37 Reflected XSS on https://www.uber.com Analysed #708081 Valid Cross-site Scripting Medium 2021-02-24 $1,000 37 Reflected XSS in lert.uber.com Analysed #191810 Valid Cross-site Scripting Medium 2018-12-19 – 39 DOM based XSS via insecure parameter on [ https://uberpay-mock-psp.uber.com ] Analysed #1767151 Valid Cross-site Scripting Medium 2023-03-23 – 39 Reflected XSS on multiple uberinternal.com domains Analysed #326449 Valid Cross-site Scripting Medium 2018-11-13 $2,000 41 Possibility to inject a malicious JavaScript code in any file on tags.tiqcdn.com results in a stored XSS on any page in most Uber domains Analysed #256152 Valid Cross-site Scripting High 2018-11-13 $6,000 51 Stored XSS on auth.uber.com/oauth/v2/authorize via redirect_uri parameter leads to Account Takeover Analysed #397497 Valid Cross-site Scripting Medium 2021-02-25 $3,000 52 [manage.jumpbikes.com] Blind XSS on Jump admin panel via user name Analysed #472470 Valid Cross-site Scripting Critical 2021-02-23 – 54 Unrestricted File Upload Results in Cross-Site Scripting Attacks Analysed #1005355 Valid Cross-site Scripting Medium 2021-05-14 – 58 xss in https://www.uber.com Analysed #145278 Valid Cross-site Scripting – 2016-07-25 – 64 Stored XSS on any page in most Uber domains Analysed #217739 Valid Cross-site Scripting High 2018-11-20 $6,000 107 [First 30] Stored XSS on login.uber.com/oauth/v2/authorize via redirect_uri parameter Analysed #392106 Valid Cross-site Scripting High 2021-02-25 $3,000 131 Stored XSS in developer.uber.com Analysed #131450 Valid Cross-site Scripting – 2016-06-27 $7,500 223 XSS At "pages.et.uber.com" #156098 N/A Cross-site Scripting – 2016-08-19 – 267