TikTok · Report #1509057
IDOR on TikTok Seller
Validstatus
lowseverity
31upvotes
16 Aug 2022disclosed
Summary
An Insecure Direct Object Reference (IDOR) vulnerability was found on a TikTok Seller endpoint via the "promotion_id" parameter, which could have resulted in a promotion being remover from a user's account. We thank @aidilarf_2000 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.