Facebook vulnerability allows hackers to delete any video from FB

Facebook flaw allows any user to delete any video from anybody's FB post A Facebook vulnerability allows you can delete any videos on Facebook in any

June 25, 2016 · 1 min · 74 words · Kyle Kelly

Table of Contents

However, during this operation Facebook forgot to add permission checks to the delete operation.

Proof Of Concept

1.Create a comment on a post via API.

2.Edit the comment and attach a VIDEO of your choice via API.

(As it takes 20 secs to DELETE the video from Facebooks server.)

DELETE /< comment id>

This will delete the video.

Pranav was awarded a five digit bug bounty reward by Facebook for his research.

spot_img