pentester.land· Feb 6, 2022· by David Schütz (@xdavidhu)💰 Bounty: 2674

Auth Bypass in Google Assistant

Target Program: Google

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Information disclosure#Authentication bypass