Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/03/19 10:10 p.m.22 views

Grammarly: Grammarly Keyboard for Android "Authorization Code with PKCE" flow implementation vulnerability that allows account takeover

@tomtenisse identified a vulnerability in Grammarly Keyboard for Android that allowed malicious application installed on the device to guess the PKCE code verifier value and consequently obtain access to OAuth accesstoken grauth cookie. The vulnerability was fixed by moving from PRNG to...

3.1AI score
SaveExploits0
Rows per page
Query Builder