Finally found the courage to write a write-up of a critical privilege check redirection I found in Discord back in 2022 that allowed attackers to use any app commands an app has, even if not deployed to the same server (think bans, rogue anti raid, etc.). gist.github.com/almostSouji/...