API Object Vulnerability In Facebook Pages Allowed Creation of Ghost FB Posts A critical Broken Object Level Authorization vulnerability in Facebook Pages was revealed by security researcher Pouya Darabi [1]. Broken Object Level Authorization (BOLA) holds the number 1 spot in the OWASP API Security Top 10 as the most common and most severe API [...]The post API Object Vulnerability In Facebook Pages Allowed Creation of Ghost FB Posts appeared first on CloudVector.