← 返回地图
破甲
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameter
信息泄露
/
信息泄露
/ #542340
厂商
Uber
严重程度
中危
· CVSS 8.5
赏金
—
弱点
信息泄露
研究员
@anandpingsafe
披露日期
2019-09-09
资产
—
CVE
—
该报告还没有中文解读。
时间线
2019-04-19
报告提交
2019-09-09
公开披露
阅读 HackerOne 原文 ↗
作者 @anandpingsafe · 版权归作者与 Uber 所有
同类报告
Confidential data of users and limited metadata of programs and reports accessible via GraphQL
HackerOne · 2019-02-03
The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summary is present
HackerOne · 2025-04-01
Customer private program can disclose email any users through invited via username
HackerOne · 2020-05-15 · $7,500
Access to multiple production Grafana dashboards
Snapchat · 2020-11-04 · $10,000
Open prod Jenkins instance
Snapchat · 2017-08-19 · $15,000
An attacker can can view any hacker email via /SaveCollaboratorsMutation operation name
HackerOne · 2023-07-04 · $12,500