Back to directory
WRITEUP #3807

Page Owners Can’t remove or change page roles of deactivated users (or if Attacker blocks the page owner) in Facebook Lite, Facebook for Android and touch.facebook.com

Logic BugLogic flaw
by@SpongeBhav(Baibhav Anand)
Bounty
525
Program
Meta / Facebook
Published
Apr 22, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://baibhavjha.com.np/blogs/deactivateduserspageroles/
RELATED WRITEUPS
Logic Flaw: I Can Block You from Accessing Your Own Account
Logic BugLogic flaw
“Like” Bypass on Customer Reviews — €500 bounty
Logic BugLogic flaw
Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP
Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat