writeups.xyz / Responsible disclosure: retrieving a user's private Facebook friends.

Submitter : c2a

Date: 23 September 2018

Bounty : 3,000

Vulnerabilities :

• Logic Flaw
• Broken Authorization
• Information Disclosure

Programs :

• Meta / Facebook

Authors :

• Riccardo Padovani (@Rpadovani93)

Link :
https://rpadovani.com/facebook-responsible-disclosure