TikTok · Report #2221547
Multiple Open Redirect on TikTok domains
Validstatus
lowseverity
61upvotes
16 Feb 2024disclosed
Summary
An open redirection vulnerability was found via a path traversal on the 'redirect_url' parameter when logging in on a TikTok Seller domain, which could have resulted in takeover of a TikTok Seller account. We thank @ashrafabdelrazik for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.