Simple 1-click account takeover via Oauth misconfiguration

Posted on 11 juin 2023 by Supr4s

This is a vulnerability that I found on one of Bug Bounty CH’s customers, explained by their team in a blog post.