writeups.xyz / User’s private watched videos/saved videos exposed through a messenger call from a locked smartphone.

Submitter : c2a

Date: 13 November 2020

Bounty : 500

Vulnerabilities :

• Information Disclosure
• Broken Authorization

Programs :

• Meta / Facebook

Authors :

• Samip Aryal (@Samiparyal_)

Link :
https://medium.com/@aryalsamipofficial59/users-private-watched-videos-list-saved-videos-etc-30faa8610b33