Uber: Uber for Business Allows Administrators to Change Uber Driver Ratings Due to Failure to Authenticate `fast-rating` Endpoint

business.uber.com allows administrators to request a copy of a receipt be emailed to them. This email contains a link to https://riders.uber.com/fast-rating which allows for the administrator to change the rating the user submitted for the Uber driver. Furthermore, the link that is supplied does...