Lab: Forced OAuth profile linking
Summary: PortSwigger's lab demonstrates a forced OAuth profile linking flaw, where insecure implementation of the OAuth flow by the client application lets an attacker manipulate the social-media linking feature to reach other users' accounts. The exercise asks the solver to use a CSRF attack to attach their own social media profile to the admin user's account, then reach the admin panel and delete carlos, with the admin opening anything sent from the exploit server while holding an active session on the blog.
Key Takeaway: The admin holds an always-active session and will open anything sent from the exploit server, so a single crafted iframe linking an attacker-controlled profile is enough to hand over an administrative account.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026