TikTok · Report #2868084
Unauthorized Access to TikTok Account [Private Videos] via API Endpoint
Validstatus
mediumseverity
167upvotes
24 Jan 2025disclosed
Summary
A vulnerability on a TikTok endpoint was found that could have resulted in unauthorized viewing of videos from private accounts. We thank @datph4m for reporting this to our team and confirming its remediation.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.