writeups.xyz / Facebook stories disclose Facebook friend list

Submitter : c2a

Date: 24 August 2017

Bounty : undisclosed

Vulnerabilities :

• Logic Flaw
• Broken Authorization

Programs :

• Meta / Facebook

Authors :

• Philippe Harewood (@Phwd)

Link :
https://philippeharewood.com/facebook-stories-disclose-facebook-friend-list/