Truffle Security Blog company blog
Google OAuth is broken (sort of)
Today I’m publicizing a Google OAuth vulnerability that allows employees at companies to retain indefinite access to applications like Slack and Zoom, after they’re off-boarded and removed from their company’s Google organization. The vulnerability is easy for a non-technical audience to understand and exploit.
- Points
- 350
- HN comments
- 182
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2023
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Dec 21, 2023 | Google OAuth is broken (sort of) by mooreds | 350 | 182 |
