writeups.xyz / Accessing to Data Sources of any Facebook Business account via IDOR in GraphQL

Submitter : c2a

Date: 6 March 2023

Bounty : undisclosed

Vulnerabilities :

• IDOR
• GraphQL

Programs :

• Meta / Facebook

Authors :

• Mukund Bhuva (@MukundBhuva)

Link :
https://medium.com/@mukundbhuva/accessing-the-data-sources-of-any-facebook-business-account-via-idor-in-graphql-1fc963ad3ecd