writeups.xyz / Oauth Misconfiguration Leads to 0-Click ATO

Submitter : c2a

Date: 2 April 2024

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Authentication Bypass
• OAuth

Programs :

• Undisclosed

Authors :

• Muhammad Mostafa (@0xSekiro)

Link :
https://medium.com/@mohamed0xmuslim/oauth-misconfiguration-leads-to-0-click-ato-b407fe05fdf4