writeups.xyz / Stealing Facebook Access Tokens with a Double Submit

Submitter : c2a

Date: 13 April 2013

Bounty : undisclosed

Vulnerabilities :

• CSRF
• OAuth

Programs :

• Meta / Facebook

Authors :

• Jack Whitton (@Fin1te)

Link :
https://whitton.io/articles/stealing-facebook-access-tokens-with-a-double-submit/