22521661-ship-it

IDOR Vulnerability in OAuth Flow

3

# Problem - The findOAuthProvider function only checks if an OAuth provider exists and is enabled. - It does not verify if the current user is authorized to use that...