Back to directory

WRITEUP #3807

Page Owners Can’t remove or change page roles of deactivated users (or if Attacker blocks the page owner) in Facebook Lite, Facebook for Android and touch.facebook.com

Logic BugLogic flaw

by@SpongeBhav(Baibhav Anand)

Bounty

525

Program

Meta / Facebook

Published

Apr 22, 2021

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://baibhavjha.com.np/blogs/deactivateduserspageroles/

▸ RELATED WRITEUPS

Logic Flaw: I Can Block You from Accessing Your Own Account

Logic BugLogic flaw

“Like” Bypass on Customer Reviews — €500 bounty

Logic BugLogic flaw

Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat