Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/04/17 12:51 p.m.34 views

Grab: Private Grab Messages on Android App can be accessed and cached by Search Engines

Description Hello. Today i discovered, that Search Engines can access the private users messages OTP pins, Group invites information etc. It happens because the https://grab-attention.grabtaxi.com host allows search indexing, and can leak the authtoken to the Search Engines which also can lead to...

6.8AI score
SaveExploits0
Rows per page
Query Builder