TikTok · Report #1247108
TikTok 2FA Bypass
Validstatus
mediumseverity
$1,564bounty
194upvotes
3 Feb 2023disclosed
Summary
A vulnerability was found where a user would be able to bypass 2FA if logging in and redirecting back on a UK TikTok Seller URL. We thank @amans for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.