writeups.xyz / Getting any Facebook user's friend list and partial payment card details

Submitter : c2a

Date: 9 March 2018

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• IDOR

Programs :

• Meta / Facebook

Authors :

• Josip Franjkovic (@Josipfranjkovic)

Link :
https://www.josipfranjkovic.com/blog/facebook-friendlist-paymentcard-leak