writeups.xyz / Google SSO misconfiguration leading to Account Takeover

Submitter : c2a

Date: 14 October 2022

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Account Takeover
• SSO

Programs :

• Undisclosed

Authors :

• 0x4KD (@0x4kd)

Link :
https://0x4kd.medium.com/google-sso-misconfiguration-leading-to-account-takeover-cf9bcf63e76e