writeups.xyz / Adding anyone including non-friend and blocked people as co-host in personal event!

Submitter : c2a

Date: 28 January 2020

Bounty : 750

Vulnerabilities :

• IDOR

Programs :

• Meta / Facebook

Authors :

• Binit Ghimire (@WHOISbinit)

Link :
https://publish.whoisbinit.me/adding-anyone-including-non-friend-and-blocked-people-as-co-host-in-personal-event