HexBrain

TikTok · Report #1416612

Clickjacking Vulnerability Can Leads To Delete Developer APP

Validstatus
lowseverity
$500bounty
27upvotes
4 May 2022disclosed

Summary

A clickjacking vulnerability was found on a TikTok subdomain, where an attacker could trick another user into deleting the Developer App. We thank @rioncool22 for reporting this to our team.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original