writeups.xyz / Victim’s Anti CSRF Token could be exposed to Third-party Applications installed on user’s Device (500$)

Submitter : c2a

Date: 21 May 2021

Bounty : 500

Vulnerabilities :

• Information Disclosure

Programs :

• Meta / Facebook

Authors :

• Rohit Kumar (@Rohitcoder)

Link :
https://rohitcoder.medium.com/victims-anti-csrf-token-could-be-exposed-to-third-party-applications-installed-on-user-s-device-be8e40d511ba