TikTok · Report #1006524
CORS misconfiguration in TikTok ads portal
Validstatus
lowseverity
69upvotes
30 Dec 2020disclosed
Summary
A CORS misconfiguration was discovered in the TikTok ads portal which could potentially allow an attacker to obtain user IDs and usernames of logged in users. This issue has been resolved. We thank @chihuahua for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.