SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300081 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 lite:sess Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300101 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 udi-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300103 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 Disclosure of Co-Rider user (Uber-pooling) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE #789803 Valid Information Disclosure Low 2021-02-25 – 3 LIsting of http://archive.uber.com/pypi/simple/ #125068 Informative Information Disclosure – 2016-03-24 – 4 SQLi in love.uber.com #125181 Valid SQL Injection – 2016-04-25 – 4 Dom Based Xss #125498 Valid Cross-site Scripting – 2016-05-09 – 4 text injection in get.uber.com/check-otp #126235 Informative No weakness recorded – 2016-09-16 – 4 Disclosure of ways to the site root #129027 Informative Information Disclosure – 2016-06-13 – 4 XSS via password recovering #131123 Informative Cross-site Scripting – 2016-07-26 – 4 Missing authentication on Notification setting . #135891 Informative Authentication – 2016-07-26 – 4 Compromising Atlassian Confluence (team.uberinternal.com) via WordPress (newsroom.uber.com) #136531 Valid Access Control – 2016-06-06 – 4 XSS in people.uber.com #140791 Duplicate Cross-site Scripting – 2016-07-26 – 4 Uber is Flooding my Mobile with SMS Daily like a cron JOB #141339 N/A Misconfiguration and Insecure Design – 2016-07-25 – 4 Header Injection #143076 Informative Denial of Service – 2016-07-08 – 4 Brute-Forcing invite codes in partners.uber.com #144616 Valid Misconfiguration and Insecure Design – 2016-07-26 $750 4 Authentication Issue for easter egg on bonjour.uber.com #146838 Informative Authentication – 2016-07-07 – 4 Wordpress Vulnerabilities in transparencyreport.uber.com and eng.uber.com domains #148163 Valid Authentication – 2016-08-24 $1,000 4 XSS on partners.uber.com #42393 Valid Cross-site Scripting – 2016-03-24 $500 5 Issue with Password reset functionality #92251 Valid Authentication – 2016-05-23 $100 5 Drivers can change profile picture #101063 Valid Authentication – 2016-05-12 $500 5 Self-XSS Vulnerability on Password Reset Form #125059 Duplicate Cross-site Scripting – 2016-06-13 – 5 Stored XSS in archive.uber.com Due to Injection of Javascript:alert(0) #126906 Valid Cross-site Scripting – 2016-05-09 $3,000 5 Use Partner/Driver App Without Being Activated #127085 Duplicate Authentication – 2016-06-14 – 5 reopen #128853 (Information disclosure at lite.uber.com) #129712 N/A Information Disclosure – 2016-07-26 – 5 Requested and received edit access to Google form #130440 Valid Information Disclosure – 2016-07-26 – 5 XSS in uber oauth #131052 Informative Cross-site Scripting – 2016-07-26 – 5 Defect-Security | Driver-Broken Authentication | Able to update the Subscription Setting anonymously #134206 Informative Authentication – 2016-07-26 – 5 Password Reset Does Not Confirm the Existence of an Email Address #143291 Informative Authentication – 2016-06-07 – 5 Email Address Enumeration #144803 Informative Misconfiguration and Insecure Design – 2016-07-07 – 5 Content injection on 404 error page at faspex.uber.com #155685 N/A Misconfiguration and Insecure Design – 2016-08-12 – 5 lert.uber.com: Few default folders/files of AURA Framework are accessible #195205 Valid Information Disclosure None 2018-12-19 – 5 The Uber Promo Customer Endpoint Does Not Implement Multifactor Authentication, Blacklisting or Rate Limiting #293359 Informative Authentication High 2017-12-24 – 5 muber-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300102 Duplicate Cross-site Scripting Critical 2017-12-26 – 5 [experience.uber.com] Node.js source code disclosure & anonymous access to internal Uber documents, templates and tools #389078 Valid Information Disclosure Medium 2021-02-23 – 5 XSS in getrush.uber.com #125112 Valid Cross-site Scripting – 2016-04-06 $3,000 6 Stored Cross Site Scripting [SELF] in partners.uber.com #125503 Informative Cross-site Scripting – 2016-06-13 – 6 CSV Injection in business.uber.com #126109 Valid Information Disclosure – 2016-04-06 $1,000 6 Reflected XSS via Livefyre Media Wall in newsroom.uber.com #134061 Valid Cross-site Scripting – 2016-05-09 $2,000 6 newsroom.uber.com is vulnerable to 'SOME' XSS attack via plupload.flash.swf #150375 Valid Command and Code Injection – 2016-08-22 – 6 ability to retrieve a user's phone-number/email for a given inviteCode #178503 Valid Information Disclosure – 2017-05-17 – 6 Configuration and/or source code files on uchat-staging.uberinternal.com can be viewed without OneLogin SSO Authentication #298990 Informative Authentication Medium 2017-12-26 – 6 Thumbor misconfiguration at blogapi.uber.com can lead to DoS #787240 Valid Denial of Service Medium 2021-02-25 $500 6 Stored XSS in drive.uber.com WordPress admin panel #126099 Valid Cross-site Scripting – 2016-05-14 $2,000 7 Users can falsely declare their own Uber account info on the monthly billing application #168453 Valid Authentication – 2016-10-20 – 7 The Microsoft Store Uber App Does Not Implement Certificate Pinning #293358 Duplicate Cryptography Critical 2017-12-24 – 7 It's possible to view configuration and/or source code on uchat.awscorp.uberinternal.com without #298862 Informative Authentication Medium 2017-12-26 – 7 Reflected XSS on Uber.com careers #117190 Valid Cross-site Scripting – 2016-04-06 – 8 Bypassing Uber Partner's 3 Cancel Limit #125218 Valid Command and Code Injection – 2016-05-26 $2,000 8 Can add employee in business.uber.com without add payment method #153175 Informative Authentication – 2016-07-26 – 8