Exploiting Auth0 Misconfigurations: A Case Study on Account Linking Vulnerabilities

During a comprehensive security assessment of an application using Auth0, my colleague Kareem Al Sadeq and I discovered a critical vulnerability that allowed us to link accounts across different authentication methods without user consent. This behav...