pentester.land· Feb 17, 2021· by Youssef Sammouda (@samm0uda)💰 Bounty: 500

Disclose internal CMS objects content

Target Program: Meta / Facebook

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Information disclosure#Broken authorization