writeups.xyz / SSO Gadgets: Escalate (Self-)XSS to ATO

Submitter : c2a

Date: 4 February 2023

Bounty : undisclosed

Vulnerabilities :

• SSO
• OAuth
• Account Takeover
• Self-XSS
• Login CSRF

Programs :

• Undisclosed

Authors :

• Lauritz Holtmann (@_Lauritz_)

Link :
https://security.lauritz-holtmann.de/post/xss-ato-gadgets/