securityaffairs.com
Facebook paid $25,000 for CSRF exploit that leads to Account Takeover
Facebook paid a $25,000 bounty for a CSRF vulnerability that could have been exploited to hijack accounts simply by tricking users into clicking on a link.
Pierluigi Paganini