writeups.xyz / Breaking TikTok: Our Journey to Finding an Account Takeover Vulnerability

Submitter : c2a

Date: 4 June 2023

Bounty : undisclosed

Vulnerabilities :

• XSS
• Account Takeover
• OAuth

Programs :

• TikTok

Authors :

• Mrhavit
• Const

Link :
https://medium.com/@mrhavit/breaking-tiktok-our-journey-to-finding-an-account-takeover-vulnerability-b0646aba1c4b