TikTok · Report #998979
CSRF for deleting videos
Validstatus
mediumseverity
16upvotes
23 Dec 2020disclosed
Summary
A CSRF (Cross Site Request Forgery) vulnerability was reported on TikTok which could potentially be used by an attacker to delete other users' public videos if the user were to click a malicious link. This issue has since been resolved. We thank @luizviana for reporting this to our team and confirming the resolution
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.