TikTok · Report #1531235
CSRF in Changing User Verification Email
Validstatus
lowseverity
$500bounty
37upvotes
13 Sept 2022disclosed
Summary
A Cross-Site Request Forgery (CSRF) was found on a TikTok Ads endpoint, which could have resulted in a malicious user adding a new user verification email address. We thank @f_m for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.