writeups.xyz / Bypassing authorization in Google Cloud Workstations [Google VRP]

Submitter : c2a

Date: 13 January 2023

Bounty : 3,133.70

Vulnerabilities :

• Account Takeover
• OAuth
• URL Validation Bypass

Programs :

• Google

Authors :

• Sivanesh Ashok (@Sivaneshashok)
• Sreeram KL (@Kl_sree)

Link :
https://blog.stazot.com/auth-bypass-in-google-cloud-workstations/