writeups.xyz / Access files uploaded by employees to internal CDNs / Regenerate URL signature of user uploaded content.

Submitter : c2a

Date: 15 February 2021

Bounty : 12,500

Vulnerabilities :

• Broken Authorization
• Logic Flaw

Programs :

• Meta / Facebook

Authors :

• Youssef Sammouda (@Samm0uda)

Link :
https://ysamm.com/?p=606