Posté par: igor51 le avril 08, 2013, 19:24:17
UPDATE Popular applications Skype and Dropbox fixed holes in their websites this week that could have allowed an attacker to gain control of users? Facebook accounts. In what?s technically being referred to as an ?open direct vulnerability,? both applications failed to validate sites before sending users and their access tokens to them.
Source: Skype, Dropbox Patch Critical Facebook Authentication Bugs (http://threatpost.com/en_us/blogs/skype-dropbox-patch-critical-facebook-authentication-bugs-040413)