⤷ Title: They Closed It as N/A. Then They Silently Patched It. Here’s The Full Story.
════════════════════════
𐀪 Author: $cr1p7 k!ddi3
════════════════════════
ⴵ Time: Fri, 29 May 2026 02:55:46 GMT
════════════════════════
⌗ Tags: #open_redirect #optional_chaining #critical #bug_bounty #oauth_security
════════════════════════
𐀪 Author: $cr1p7 k!ddi3
════════════════════════
ⴵ Time: Fri, 29 May 2026 02:55:46 GMT
════════════════════════
⌗ Tags: #open_redirect #optional_chaining #critical #bug_bounty #oauth_security
Medium
🔴 They Closed It as N/A. Then They Silently Patched It. Here’s The Full Story.
A Critical P1 Bug Chain on a Fintech Platform — Open Redirect → OAuth Token Theft → Full Account Takeover | Intigriti Disclosure