Facebook: vulnerability was the result of 3 distinct bugs and was introduced in July 2017, attackers could use the account as if they were the account holder (Motherboard)

Motherboard:
Facebook: vulnerability was the result of 3 distinct bugs and was introduced in July 2017, attackers could use the account as if they were the account holder  —  Facebook “discovered a security issue” that the company said allowed attackers to “take over people's accounts.”