The bug allowed 1,500 apps built by 876 developers to view users' unposted "draft" photos.
https://threatpost.com/facebook-photos-exposed/139940/