A software bug meant millions of Facebook users may have unknowingly posted private information to the public, the company has warned.