writeups.xyz / OAuth and PostMessage - Chaining misconfigurations for your access token.

Submitter : c2a

Date: 21 February 2022

Bounty : undisclosed

Vulnerabilities :

• OAuth
• PostMessage
• Token Leak

Programs :

• Undisclosed

Authors :

• Suraj Disoja (@Ninetyn1ne_)

Link :
https://ninetyn1ne.github.io/2022-02-21-oauth-postmessage-misconfig/