writeups.xyz / Disclosing the members of private Facebook Group as a non-member.

Submitter : c2a

Date: 15 December 2020

Bounty : 4,500

Vulnerabilities :

• Broken Authorization
• Logic Flaw

Programs :

• Meta / Facebook

Authors :

• Baibhav Anand (@SpongeBhav)

Link :
https://baibhavjha.com.np/blogs/fblitegroupmemberdisclosure/