This bug could allowed a malicious user to generate access tokens for any Facebook user. I found this bug by mistake when i was testing…