Uber: Thumbor misconfiguration at blogapi.uber.com can lead to DoS

The subdomain blogapi.uber.com is internally downloading images from external sources and resizing it to arbitrary values, then sending a response to the user...