Case Study: Pre-Account Takeover via OAuth Misconfiguration
Relevant CWE: CWE-287 โ Improper Authentication - Generic
Introduction
Imagine signing up for a new platform using your Google account. You successfully authenticate, access your dashboard, and start