TikTok · Report #1253462
CSRF Account Takeover
Validstatus
highseverity
95upvotes
16 Aug 2022disclosed
Summary
A Cross-Site Request Forgery (CSRF) vulnerability was found on a TikTok endpoint which could have resulted in a full account takeover. We thank @s3c for reporting this to our team and confirming its resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.