TikTok · Report #1001951
CORS bypass on TikTok Ads Endpoint
Validstatus
mediumseverity
$257bounty
19upvotes
31 Dec 2020disclosed
Summary
An endpoint used by the TikTok Ads portal was vulnerable to CORS bypass therefore potentially allowing an attacker to access information about tickets opened if the user were to click on a malicious link. We thank @sniper302 for reporting this to our team and confirming the resolution!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.