writeups.xyz / Add users to roles on Facebook pages without an invitation consent

Submitter : c2a

Date: 12 September 2019

Bounty : undisclosed

Vulnerabilities :

• Broken Authorization

Programs :

• Meta / Facebook

Authors :

• Philippe Harewood (@Phwd)

Link :
https://philippeharewood.com/add-users-to-roles-on-facebook-pages-without-an-invitation-consent/