HexBrain

TikTok · Report #1654657

Add products to any livestream.

Validstatus
mediumseverity
34upvotes
21 Sept 2022disclosed

Summary

An improper access control issue on a TikTok Shop endpoint could have resulted in arbitrary products being added to livestreams. We thank @datph4m for reporting this to our team.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original