Posté par: igor51 le février 27, 2013, 21:56:39
Social media supersite Facebook has fixed a vulnerability that could have allowed a hacker to access a user?s account simply by getting them to click through to a specially crafted website. The flaw essentially mimicked the functionality of an authentic Facebook application without actually installing an application to their profile.
Source: Facebook Patches OAuth Authentication Vulnerability (http://threatpost.com/en_us/blogs/facebook-patches-oauth-authentication-vulnerability-022613)