Meta Restores Muse Artifact Sharing After Replacing Older URLs

Meta restored sharing for Muse artifacts Oct. 22 after reviewing a discovery issue and replacing URLs for items shared before the fix.

Meta’s David Singleton announced the return. He said visitors using older links would be prompted to request an updated URL from the person who shared the artifact.

Muse artifacts include documents, images, code and web apps. Users must approve external sharing of an artifact.

Claroc researchers said a filtered search of passive DNS records identified more than 6,800 Muse share hostnames. They opened a few hundred pages, finding sensitive personal or business information on a minority of them. Examples included a small-business loan application and a company revenue review. Claroc said it found no evidence of misuse and did not measure the total exposure.

The restoration follows the Oct. 20 pause in Muse sharing, while Meta reviewed how the pages could be discovered. Claroc submitted its findings to Meta’s bug bounty program Oct. 8. During the pause, researchers rechecked 40 shares; none opened in that check.