Vulnerabilities in Bitbucket OAuth