Other nomination

Covert Redirect Vulnerability Related to OAuth 2.0 and OpenID

Wang Jing · tetraph.com

OAuth 2.0 and OpenID providers accept loosely validated redirect targets pointing at domains a client has whitelisted but which carry open redirect or XSS flaws. Chaining the two makes the provider hand an access token or OpenID profile data to a site the attacker controls, affecting most major single sign-on providers.

Record

Researcher

Wang Jing

Published by

tetraph.com

In the archive

• Nominated for the 2014 Top 10 Web Hacking Techniques

Related sources

• GitHub case study
• GitHub case-study video

Tags

• open-redirect
• oauth
• openid
• sso
• info-leak
• xss
• auth-bypass
• owasp-a01-2021
• owasp-a03-2021
• owasp-a04-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Wang Jing, first published at the original source. Preserved copies are kept so the citation survives its host.