4 ms·
Authentication Bypass on Uber’s Single Sign-On via Subdomain Takeover
- eterm 9y agoI find it concerning that the original report apparently "fell through the cracks" and had to be chased up with Uber.
- breakingcups 9y agoAnd somehow they did reward it with a $500 bounty before it fell through the cracks, and a $4500 bounty after it was rediscovered.