writeups.xyz / De-anonymize the members of a private Facebook Group as a non-member.

Submitter : c2a

Date: 15 March 2021

Bounty : 4,500

Vulnerabilities :

• GraphQL
• Information Disclosure

Programs :

• Meta / Facebook

Authors :

• Baibhav Anand (@SpongeBhav)

Link :
https://baibhavjha.com.np/blogs/facebookgroupmemberdisclosure/