Group expert's pending expertise request leaking on Facebook
Group experts can add expertise to their badge. The group experts need to send expertise requests to the group admin for approval. These requests are only visible to group admins in the "Badge requests" option. The admin has the authority to approve or reject the expertise requests submitted by group experts.Anyone could be able to see pending expertise requests of any public group by changing the group ID on the following API request :
POST /api/graphql/ HTTP/2
1) Go to Group admin's dashboard , clicks "Badge Requests" and intercept the request.
Triaged : 18 -07- 2022