This flaw fixed by Facebook Security,