Orphaned Accounts to Full Control: An Authentication Logic Flaw
Abusing accounts tied to deactivated organisations to reach a hidden signup endpoint, bypassing an invite-only model to create arbitrary accounts and self-select privileged roles.
3 min read