Information Disclosure
Weblate disclosed a bug submitted by aydinyunus: https://hackerone.com/reports/2370002 [Source]
Host Header Injection – internal.qa.delivery.indrive.com
inDrive disclosed a bug submitted by mega9: https://hackerone.com/reports/2076786 [Source]