TikTok · Report #1392630
IDOR the ability to view support tickets of any user on seller platform
Validstatus
mediumseverity
$2,500bounty
74upvotes
3 Dec 2021disclosed
Summary
Due to an Insecure Direct Object Reference (IDOR) vulnerability, an attacker could have potentially viewed support tickets on seller platform. We thank @lewaperbb for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.