“Covert Redirect” OAuth Security Flaw Not as Serious as It Sounds, Experts Say

“Covert Redirect” OAuth Security Flaw Not as Serious as It Sounds, Experts Say

User interaction is required and an open redirect must exist for the attack to work