Facebook flaw could have allowed an attacker to hijack accounts
The CSRF bypass flaw has now been fixed, and the researcher who discovered it has netted $25,000.
Read more: Facebook flaw could have allowed an attacker to hijack accounts
Story added 19. February 2019, content source with full text you can find at link above.