LY Corporation · Report #697099
Reflected XSS in OAUTH2 login flow
Validstatus
mediumseverity
$1,990bounty
489upvotes
21 Apr 2020disclosed
Summary
The reporter found a reflected XSS in the OAUTH2 login flow which could have allowed potential attackers to steal credentials or hijack accounts by sending a message to the victim containing a malicious URL.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.