OAuth HPP test: send two redirect_uri parameters… — Bug Bounty — TG.ME

BUBug Bounty@bugbountyresources · 12.2K subscribersOpen in TelegramOpen

OAuth HPP test: send two redirect_uri parameters.

?redirect_uri=https://app.com&redirect_uri=https://evil.com

If server validates the first and uses the last, the token goes to http://evil.com.

Validate first, use last.

Source: Twitter/Digits #114169.

t.me/bugbountyresources/1059

4

2

1

1

August 3, 2026 2.8K 19