Google DevSite RCE: How a leaked secret enabled remote code execution
A researcher found a critical vulnerability in Google's DevSite platform where an OAuth client secret was used to sign session cookies, enabling remote code execution across multiple domains.
