TikTok · Report #1610316
Improper user validation on mentions and hashtags
Validstatus
lowseverity
16upvotes
22 Jun 2023disclosed
Summary
By manipulating the parameter on a TikTok publish API, the link to the handle in the comment could be taken over. While there is no immediate impact, this could result in further social engineering attacks. We thank @rektile404 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.