Unsubscribe any user from receiving email

Disclosed: 2016-06-13 23:01:27 By ashish_r_padelkar To uber
Unknown
Vulnerability Details
hi, At url `https://www.uber.com/unsubscribe` you can unsubscribe any email of any user, which is bit of concern for the people who wants to receive emails from uber. only people who gets email from uber should be allowed to unsubscribe themselves from uber emails rather than anybody unsubscribing anyone Regards Ashish
Actions
View on HackerOne
Report Stats
  • Report ID: 130521
  • State: Closed
  • Substate: informative
  • Upvotes: 3
Share this report