FB Lite All Users Active Status Changed

I’m glad you’re here. Please have fun reading (nmochea).

This write-up is all about how I change all FB Lite users’ active status that logged in on the same device.

To be honest I accidentally discover this vulnerability when I logged in to multiple users’ accounts in the FB Lite application on the same device.

That time I turn off my active status in my user_1 when I switch my account user_1 to user_2 I was suddenly notified that user_2 has changed the active status too, wait wtf so I try to switch account again user_2 to user_3 and it’s all turn off active status, hmmm it pretty looks like vulnerability I created a report regarding this issue.

Vulnerability Disclosure

October 23, 2020 – Reported the vulnerability.

October 28, 2020 – Triaged my report.

February 1, 2021 — Resolved and Bounty Rewarded.

Thanks for reading this article, I hope you guys learn something new today. Please share this article to spread the knowledge.