writeups.xyz / googlesource.com access_token leak (Awarded $7500)

Submitter : c2a

Date: 11 June 2023

Bounty : $7,500

Vulnerabilities :

• URL Validation Bypass
• Regex
• Token Leak

Programs :

• Google

Authors :

• NDevTK (@Ndevtk)

Link :
https://ndevtk.github.io/writeups/2023/06/11/googlesource/