TikTok · Report #997615
CSRF To Add New App In Developer Account And Bypassing Json Format
Validstatus
mediumseverity
$200bounty
39upvotes
6 Nov 2020disclosed
Summary
The researcher found a CSRF issue allowing a malicious user to add arbitrary applications to a developer's account.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.