writeups.xyz / Authentication bypass on Uber’s Single Sign-On via subdomain takeover

Submitter : c2a

Date: 25 June 2017

Bounty : 4,500

Vulnerabilities :

• Subdomain Takeover
• Authentication Bypass

Programs :

• Uber

Authors :

• Arne Swinnen (@ArneSwinnen)

Link :
https://www.arneswinnen.net/2017/06/authentication-bypass-on-ubers-sso-via-subdomain-takeover/