TikTok · Report #1418857
Clickjacking Vulnerability In Whole Page Ads Tiktok
Validstatus
lowseverity
$500bounty
8upvotes
7 Jul 2022disclosed
Summary
A clickjacking vulnerability was found on a TikTok Ads endpoint, where an attacker, once obtaining the ID, could trick another user to perform actions such as creating or deleting campaigns. We thank @rioncool22 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.