TikTok · Report #1437294
URL Scheme misconfiguration on TikTok for IOS
Validstatus
lowseverity
$500bounty
18upvotes
4 May 2022disclosed
Summary
A misconfigured URL schema on a TikTok iOS endpoint could have resulted in a user being forced to follow other accounts by visiting a malicious website or HTML page. We thank @glassplant for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.