writeups.xyz / Dodging OAuth origin restrictions for Firebase spelunking

Submitter : c2a

Date: 23 November 2022

Bounty : undisclosed

Vulnerabilities :

• OAuth
• Security Misconfiguration
• Broken Authentication

Programs :

• Undisclosed

Authors :

• Aditya Saligrama (@Saligrama_a)
• Glen Husman

Link :
https://saligrama.io/blog/post/dodging-oauth-origin-restrictions/