writeups.xyz / Account takeover of Facebook/Oculus accounts due to First-Party access_token stealing

Submitter : c2a

Date: 29 January 2023

Bounty : 44,250

Vulnerabilities :

• Account Takeover
• OAuth
• Open Redirect

Programs :

• Meta / Facebook

Authors :

• Youssef Sammouda (@Samm0uda)

Link :
https://ysamm.com/?p=777