
OpenAI login flaw: how two vulnerabilities opened a path to accounts and an internal repository
Hacktron chained a Discourse flaw with excessive permissions in OpenAI sign-in, demonstrated access to accounts and an internal repository, and documented the limits and fixes.
Read article

