Facebook is vulnerable to a flaw that could allow an attacker to use Facebook to send mass emails to any victim address.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56720/facebook_spam_flaw.pdf
Source: https://packetstormsecurity.com/files/56720/facebook_spam_flaw.pdf.html