TikTok · Report #1527906
IDOR on TikTok Ads Endpoint
Validstatus
mediumseverity
109upvotes
1 Sept 2022disclosed
Summary
An Insecure Direct Object Reference (IDOR) vulnerability was found on a TikTok Ads endpoint, which could have resulted in an unauthorized user adding products into another user's catalogue. We thank @sinayeganeh for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.