pentester.land· Jun 6, 2021· by Samip Aryal (@samiparyal_)💰 Bounty: 3,150

How I could have accessed all your private videos/photos saved inside your device without even unlocking it?

Open Original Article ↗
Target Program: Meta / Facebook
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Broken authorization#Logic flaw