TikTok · Report #1560072
Email address disclosure via invite token validatiion
Validstatus
lowseverity
$250bounty
11upvotes
11 Jun 2022disclosed
Summary
The possibility of email address disclosure was found on a Business.TikTok.com endpoint as no rate limit was implemented on the invite token. We thank @noob_but_cut3 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.