pentester.land· Jan 23, 2023· by Tal Peleg, Nitay Bachrach

CrossTalk and Secret Agent: Two Attack Vectors on Okta's Identity Suite

Open Original Article ↗
Target Program: Okta
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Insecure storage of sensitive information#Phishing