Internal path disclosure on Meta View app (now Meta AI)

When using Meta Rayban glasses for image detection, a photo is captured and then uploaded to rupload.facebook.com/photoshub_upload_media_ar_chunked_everstore. If the mmai activity in the request header isn t set correctly, the upload will fail with an error disclosing internal paths. Timeline Oct 16, 2024 – Report sentOct 21, 2024 – Report triaged by MetaOct 24, 2024 – Bounty Continue reading…