TikTok · Report #1559739
IDOR in report download functionality on ads.tiktok.com
Validstatus
lowseverity
$500bounty
25upvotes
22 Jul 2022disclosed
Summary
An IDOR (Insecure Direct Object Reference) vulnerability was found on a TikTok Ads endpoint within the report download functionality. We thank @f_m for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.