writeups.xyz / SSO Gadgets II: Unauthenticated Client-Side Template Injection to Account Takeover using SSO Gadget Chain

Submitter : c2a

Date: 30 June 2023

Bounty : undisclosed

Vulnerabilities :

• CSTI
• Account Takeover
• SSO
• OIDC

Programs :

• Undisclosed

Authors :

• Lauritz Holtmann (@_Lauritz_)

Link :
https://security.lauritz-holtmann.de/post/csti-xss-sso-gadget-chain/