Researcher Finds 10 Year-Old Facebook Bug That Allows Hackers to Steal Access Tokens

A researcher discovered a critical account takeover vulnerability in Facebook’s Authorization feature “Login with Facebook” that allows attackers to steal access tokens to access user accounts.