writeups.xyz / OAuth Misconfiguration Leads to Full Account takeover

Submitter : c2a

Date: 13 February 2021

Bounty : undisclosed

Vulnerabilities :

• OAuth
• Clickjacking
• CSRF
• Account Takeover

Programs :

• Undisclosed

Authors :

• Yasser Mohammed (@Boomneroli)

Link :
https://neroli.medium.com/oauth-misconfiguration-leads-to-full-account-takeover-22b032cb6732