writeups.xyz / Salt Labs exposes a new vulnerability in popular OAuth framework, used in hundreds of online services

Submitter : c2a

Date: 24 May 2023

Bounty : undisclosed

Vulnerabilities :

• OAuth
• Account Takeover

Programs :

• Expo
• Codeacademy.com

Authors :

• Aviad Carmel (@AviadCarmel)

Link :
https://salt.security/blog/a-new-oauth-vulnerability-that-may-impact-hundreds-of-online-services