HexBrain

TikTok · Report #997514

Bypass "Industry Documents" Validation

Validstatus
lowseverity
$50bounty
43upvotes
29 Oct 2020disclosed

Summary

The researcher found that the attacker can bypass the review process and mark the document as "approved" when a user adds Industry Documents. The attacker will bypass only the qualification status at frontend, the form status is still under review, and it will be reviewed by an employee .

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original