writeups.xyz / Stealing Google Drive OAuth tokens from Dropbox

Submitter : c2a

Date: 17 May 2022

Bounty : 1,728

Vulnerabilities :

• CSRF
• SSRF
• Account Takeover

Programs :

• Dropbox

Authors :

• Sivanesh Ashok (@Sivaneshashok)
• Sreeram KL (@Kl_sree)

Link :
https://blog.stazot.com/stealing-google-drive-oauth-tokens-from-dropbox/