Skip to content
Threat Feed
Subscribe

Tag

Identity-Threats

1 brief RSS
low advisory

GitHub OAuth Application Authorization Persistence

Attackers can achieve persistent unauthorized access to GitHub repositories by abusing OAuth application grants, which remain valid even after user password resets.

GitHub cloud-security saas-security identity-threats persistence
2t