TikTok · Report #1087436
CSRF on TikTok Ads Portal
Validstatus
mediumseverity
$1,000bounty
23upvotes
26 May 2021disclosed
Summary
A CSRF (Cross Site Request Forgery) vulnerability was reported in the TikTok Ads portal which could have been used to disable an ad campaign. We thank @probatorem for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.