Write-upAuthentication bypass
Auth bypass on API token refresh
How a critical authentication bypass in *.northwind.com was found, reported to Northwind Cloud and fixed.
Write-ups from the researchers who found the bugs, guides on how they work, and advisories from the companies that fixed them. A write-up is tied to a real report, published under that program’s own disclosure policy.
How a critical authentication bypass in *.northwind.com was found, reported to Northwind Cloud and fixed.