pentester.land· Apr 2, 2022· by Ph.Hitachi

View Friends List of any users using “View as” | Facebook Bug bounty

Open Original Article ↗
Target Program: Meta / Facebook
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Logic flaw#Broken Access Control