Collected research
Millions of Accounts Vulnerable due to Google’s OAuth Flaw
Shows that Google OAuth identifiers tied to defunct company domains can become valid again when an attacker re-registers the domain and recreates employee accounts. Applications relying only on immutable Google identity claims may then grant access to former employees' accounts and organizational data.
Record
- Researcher
- Dylan Ayrey
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Dylan Ayrey, first published at the original source. Preserved copies are kept so the citation survives its host.