TikTok · Report #1249050
Information Disclosure on TikTok Unplugged Site
Validstatus
lowseverity
11upvotes
13 Aug 2021disclosed
Summary
An attacker could have retrieved information such as a list of installed packages and their versions due to improper information disclosure on the TikTik Unplugged site. We thank @nanwn for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.