writeups.xyz / Exploiting CSP in Webkit to Break Authentication & Authorization

Submitter : c2a

Date: 13 November 2021

Bounty : 100,000

Vulnerabilities :

• Information Disclosure
• CSP Leak
• Account Takeover

Programs :

• Apple

Authors :

• Sachin Thakuri (@Sachinnthakuri)
• Prakash (@1lastBr3ath)

Link :
https://threatnix.io/blog/exploiting-csp-in-webkit-to-break-authentication-authorization/