News and Notes from the Makers of Nexus | Sonatype Blog

Flaw in Facebook allowed attackers to record video of user and post on timeline

Written by Ali Loney | December 28, 2012

Softpedia – (International) Flaw in Facebook allowed attackers to record video of user and post it on the timeline. Researchers from XYSEC Labs identified a cross-site request forgery (CSRF) vulnerability in Facebook that could allow an attacker to record video from the victim's webcam or other source and then post it to the victim's timeline.

Source: http://news.softpedia.com/news/Flaw-in-Facebook-Allowed-Attackers-to-Record-Video-of-User-and-Post-It-on-the-Timeline-Video-317462.shtml