eval.blog personal blog
Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App
How an open redirect in Harvest’s Outlook Calendar integration leaked the OAuth tokens of connected Microsoft accounts, with a step-by-step proof of concept.
- Points
- 367
- HN comments
- 104
- Submissions
- 1
- Cited by
- 0 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Oct 22, 2023 | Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App by skilled | 367 | 104 |
