writeups.xyz / This is why you shouldn’t trust your Federated Identity Provider

Submitter : c2a

Date: 15 September 2021

Bounty : 1,500

Vulnerabilities :

• OAuth
• Account Takeover
• Authentication Bypass

Programs :

• Undisclosed

Authors :

• Soufiane Habti (@Wld_basha)

Link :
https://medium.com/@soufianehabti/this-is-why-you-shouldnt-trust-your-federated-identity-provider-62160f50d8b2