NOAuth: Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover
descope.com