writeups.xyz / Applying a small bypass to steal Facebook Session tokens in Uber

Submitter : c2a

Date: 2 October 2018

Bounty : 2,000

Vulnerabilities :

• XSS
• CSP Bypass
• OAuth

Programs :

• Uber

Authors :

• Samuel (@Saamux)

Link :
https://medium.com/@saamux/applying-a-small-bypass-to-steal-facebook-session-tokens-in-uber-5b9638b7a18c