Easy spam with USE My PHONE Feature

Disclosed: 2016-06-13 22:37:26 By decoder To uber
Unknown
Vulnerability Details
By this Bug we can easily spam anyone's phone with Uber Sms We just need to use his/her phone number while registration and Open https://partners.uber.com/dashboard/documents/ so we have 2 option 1st is upload and 2nd is Send Sms on phone so we can spam anyone's phone by using sms feature you should use phone number verification process or sms limit in one day Thanks
Actions
View on HackerOne
Report Stats
  • Report ID: 127918
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report