writeups.xyz / Hijacking accounts by retrieving JWT tokens via unvalidated redirects

Submitter : c2a

Date: 27 January 2019

Bounty : undisclosed

Vulnerabilities :

• Open Redirect
• Token Leak

Programs :

• Undisclosed

Authors :

• Shawar Khan (@ShawarkOFFICIAL)

Link :
https://www.shawarkhan.com/2019/01/hijacking-accounts-by-retrieving-jwt.html