Microsoft and GitHub OAuth Implementation Vulnerabilities Lead to Redirection Attacks

Vulnerabilities in Microsoft and others’ popular OAuth2.0 implementations lead to redirection attacks that bypass most phishing detection solutions and email security solutions.