Case Study: Pre-Account Takeover via OAuth Misconfiguration

Relevant CWE: CWE-287 — Improper Authentication - Generic Introduction Imagine signing up for a new platform using your Google account. You successfully authenticate, access your dashboard, and start