I Found a High-Severity OAuth Account Takeover Vulnerability on IIT Madras’s Student Portal

A broken OAuth flow on IITM’s student portals let any student take over another’s account using just their own email. No tools. No tricks.