TikTok · Report #1571578
Create product discounts of any shop
Validstatus
mediumseverity
21upvotes
21 Sept 2022disclosed
Summary
An Insecure Direct Object Reference (IDOR) vulnerability was found on a TikTok seller endpoint, which could have resulted in any user to create product discounts for shops they did not own. We thank @datph4m for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.