pentester.land· Apr 22, 2021· by Baibhav Anand (@SpongeBhav)💰 Bounty: 525

Page Owners Can’t remove or change page roles of deactivated users (or if Attacker blocks the page owner) in Facebook Lite, Facebook for Android and touch.facebook.com

Open Original Article ↗
Target Program: Meta / Facebook
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Logic flaw