API Security Flaw Found in Booking.com Allowed Full Account Takeover

Several security flaws were found in the implementation of the Open Authorization (OAuth) social login functionality used by the online travel agency Booking.com. Vulnerabilities discovered by salt security Users logged into the site via Facebook accounts may be affected. “OAuth…








