writeups.xyz / Stealing user passwords through a VPN’s SSO

Submitter : c2a

Date: 25 February 2021

Bounty : undisclosed

Vulnerabilities :

• Open Redirect
• SSTI

Programs :

• Undisclosed

Authors :

• Alain Mowat (@Plopz0r)

Link :
https://blog.scrt.ch/2021/02/25/stealing-user-passwords-through-a-vpns-sso/