TikTok · Report #2286745
Authentication Bypass on TikTok Seller Signup Process Allows Account Creation Without Phone Verification
Validstatus
lowseverity
84upvotes
3 Jul 2024disclosed
Summary
The required phone number verification process on the TikTok Seller homepage could have been bypassed by manipulation of the URL after initial login steps. We thank @zhyar_11010 for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.