writeups.xyz / How I was able to generate Access Tokens for any Facebook user.

Submitter : c2a

Date: 11 December 2018

Bounty : undisclosed

Vulnerabilities :

• IDOR
• Information Disclosure

Programs :

• Meta / Facebook

Authors :

• Youssef Sammouda (@Samm0uda)

Link :
https://medium.com/bugbountywriteup/how-i-was-able-to-generate-access-tokens-for-any-facebook-user-6b84392d0342