writeups.xyz / Add users to roles on Facebook pages without an invitation consent (revisited)

Submitter : c2a

Date: 18 August 2019

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw
• Broken Authorization

Programs :

• Meta / Facebook

Authors :

• Philippe Harewood (@Phwd)

Link :
https://philippeharewood.com/add-users-to-roles-on-facebook-pages-without-an-invitation-consent-revisited/