Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest App(eval.blog)
349 points by skilled | 102 comments
A security researcher's write-up on leaking Microsoft account OAuth tokens through an open redirect vulnerability in the Harvest time-tracking app.