Updated to "Stealing OAuth tokens of connected Microsoft accounts via open redirect in Harvest App"
(Submitted title was "Microsoft Account's OAuth tokens leaking via open redirect in Harvest")
Updated to "Stealing OAuth tokens of connected Microsoft accounts via open redirect in Harvest App"