Reflected XSS via Livefyre Media Wall in newsroom.uber.com #134061 Valid Cross-site Scripting – 2016-05-09 $2,000 6 CSV Injection in business.uber.com #126109 Valid Information Disclosure – 2016-04-06 $1,000 6 Stored Cross Site Scripting [SELF] in partners.uber.com #125503 Informative Cross-site Scripting – 2016-06-13 – 6 XSS in getrush.uber.com #125112 Valid Cross-site Scripting – 2016-04-06 $3,000 6 [experience.uber.com] Node.js source code disclosure & anonymous access to internal Uber documents, templates and tools #389078 Valid Information Disclosure Medium 2021-02-23 – 5 muber-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300102 Duplicate Cross-site Scripting Critical 2017-12-26 – 5 The Uber Promo Customer Endpoint Does Not Implement Multifactor Authentication, Blacklisting or Rate Limiting #293359 Informative Authentication High 2017-12-24 – 5 lert.uber.com: Few default folders/files of AURA Framework are accessible #195205 Valid Information Disclosure None 2018-12-19 – 5 Content injection on 404 error page at faspex.uber.com #155685 N/A Misconfiguration and Insecure Design – 2016-08-12 – 5 Email Address Enumeration #144803 Informative Misconfiguration and Insecure Design – 2016-07-07 – 5 Password Reset Does Not Confirm the Existence of an Email Address #143291 Informative Authentication – 2016-06-07 – 5 Defect-Security | Driver-Broken Authentication | Able to update the Subscription Setting anonymously #134206 Informative Authentication – 2016-07-26 – 5 XSS in uber oauth #131052 Informative Cross-site Scripting – 2016-07-26 – 5 Requested and received edit access to Google form #130440 Valid Information Disclosure – 2016-07-26 – 5 reopen #128853 (Information disclosure at lite.uber.com) #129712 N/A Information Disclosure – 2016-07-26 – 5 Use Partner/Driver App Without Being Activated #127085 Duplicate Authentication – 2016-06-14 – 5 Stored XSS in archive.uber.com Due to Injection of Javascript:alert(0) #126906 Valid Cross-site Scripting – 2016-05-09 $3,000 5 Self-XSS Vulnerability on Password Reset Form #125059 Duplicate Cross-site Scripting – 2016-06-13 – 5 Drivers can change profile picture #101063 Valid Authentication – 2016-05-12 $500 5 Issue with Password reset functionality #92251 Valid Authentication – 2016-05-23 $100 5 XSS on partners.uber.com #42393 Valid Cross-site Scripting – 2016-03-24 $500 5 Wordpress Vulnerabilities in transparencyreport.uber.com and eng.uber.com domains #148163 Valid Authentication – 2016-08-24 $1,000 4 Authentication Issue for easter egg on bonjour.uber.com #146838 Informative Authentication – 2016-07-07 – 4 Brute-Forcing invite codes in partners.uber.com #144616 Valid Misconfiguration and Insecure Design – 2016-07-26 $750 4 Header Injection #143076 Informative Denial of Service – 2016-07-08 – 4 Uber is Flooding my Mobile with SMS Daily like a cron JOB #141339 N/A Misconfiguration and Insecure Design – 2016-07-25 – 4 XSS in people.uber.com #140791 Duplicate Cross-site Scripting – 2016-07-26 – 4 Compromising Atlassian Confluence (team.uberinternal.com) via WordPress (newsroom.uber.com) #136531 Valid Access Control – 2016-06-06 – 4 Missing authentication on Notification setting . #135891 Informative Authentication – 2016-07-26 – 4 XSS via password recovering #131123 Informative Cross-site Scripting – 2016-07-26 – 4 Disclosure of ways to the site root #129027 Informative Information Disclosure – 2016-06-13 – 4 text injection in get.uber.com/check-otp #126235 Informative No weakness recorded – 2016-09-16 – 4 Dom Based Xss #125498 Valid Cross-site Scripting – 2016-05-09 – 4 SQLi in love.uber.com #125181 Valid SQL Injection – 2016-04-25 – 4 LIsting of http://archive.uber.com/pypi/simple/ #125068 Informative Information Disclosure – 2016-03-24 – 4 Disclosure of Co-Rider user (Uber-pooling) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE #789803 Valid Information Disclosure Low 2021-02-25 – 3 udi-id Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300103 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 lite:sess Query Parameter Can Generate SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300101 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300081 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 SSL-protected Reflected XSS in https://m.uber.com/0-dfffb25d2cf6ceeb0a27.js Endpoint #300080 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 SSL-protected Reflected XSS in m.uber.com #296701 Duplicate Cross-site Scripting Critical 2017-12-26 – 3 The Microsoft Store Uber App Does Not Implement Server-side Token Revocation #293363 Informative Authentication Medium 2017-12-24 – 3 Text Only Content Spoofing on ubermovement.com Community Page #153095 Informative Misconfiguration and Insecure Design – 2016-07-26 – 3 Newsroom.uber HTML form without CSRF protection #144147 Informative Cross-Site Request Forgery – 2016-07-07 – 3 Email Enumeration Vulnerability #143672 Informative No weakness recorded – 2016-07-07 – 3 Phone Number Enumeration #138881 Informative Information Disclosure – 2016-07-07 – 3 Self-XSS on partners.uber.com #138622 Informative Cross-site Scripting – 2016-07-26 – 3 Uber for Business Allows Administrators to Change Uber Driver Ratings Due to Failure to Authenticate `fast-rating` Endpoint #134521 Informative Authentication – 2016-07-26 – 3 Information Disclosure on lite.uber.com #133375 Informative Information Disclosure – 2016-07-07 – 3 Unsubscribe any user from receiving email #130521 Informative Misconfiguration and Insecure Design – 2016-06-13 – 3