pentester.land· Aug 7, 2018· by Dikla Barda, Roman Zaikin (@R0m4nZ41k1n), Oded Vanunu (@Od3dV)

FakesApp: A Vulnerability in WhatsApp

Target Program: Meta / Facebook

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Content spoofing#Broken authorization#Privacy issue