Logic Flaw in Meta Account Center: The Case of the Silent Patched Disavow Flow
quality 4/10 · average
0 net
AI Summary
A logic flaw was discovered in Meta's Account Center 'This wasn't me' disavow flow that could potentially be exploited for unauthorized account access or control, which Meta later patched.
Tags
Entities
Meta
Account Center
Introduction While conducting security research on Meta’s Account Center, I identified a significant logic flaw in the “This wasn’t me”…