🎯 New Report #3829030: Debug Deep Link Abuse Allows Repeated Forced Logout and Application Disruption
🔺Severity: Low
👽 Reporter: 0xkarim dix
⭐️ Reputation: 1609
🛠 State: resolved
💼 Team: Yelp
💵 Bounty: null
🕐 Submitted: 2026-06-27
⏰ Disclosed: 2026-08-13 13:30:14
📝 Summary: A debug deep link was discovered in the Android application "com.yelp.android.biz" that could be triggered externally, causing the application to crash and the user's session to be invalidated, requiring the user to log in again. The existence of this exposed deep link allowed any malicious application installed on the same device to repeatedly trigger this behavior, resulting in a persistent local denial of service against the application.
📂 Report JSON File: 3829030
@hackeronereports