writeups.xyz / Oauth client secret leak and possible IDOR leading to PII Disclosure

Submitter : c2a

Date: 26 August 2021

Bounty : undisclosed

Vulnerabilities :

• IDOR
• OAuth
• Information Disclosure

Programs :

• Undisclosed

Authors :

• Monke (@Pmofcats)
• Bend Theory (@Bendtheory)

Link :
https://web.archive.org/web/20210920030213/https://pmoc.netsoc.cloud/oauth-idor-pii/