TikTok · Report #1065500
Multiple bugs leads to RCE on TikTok for Android
Validstatus
criticalseverity
371upvotes
17 Mar 2021disclosed
Summary
A series of WebView vulnerabilities were found including XSS which could have potentially led an attacker to achieve remote code execution. We thank @dphoeniixx for reporting this to our team and verifying the resolution!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.