Facebook vulnerability may allow attackers to create a phishing attack through the trusted domain. The Vulnerability resides in validating the contents of the files posted through links and Unvalidated re-directions.
Read full news article on GBHackers