Vulnerabilities found in TikTok: Report

Researchers discovered significant vulnerabilities in TikTok, allowing hackers to exploit a function on TikTok's website to access user accounts. By manipulating the download URL, attackers could send fraudulent SMS links, gaining control over user accounts. This enabled them to alter content feeds, change privacy settings, and execute JavaScript to extract sensitive information like emails and payment details.

What function on TikTok's website did researchers find vulnerable?

• A function allowing users to enter their phone number for a download link

• A function for uploading videos

• A function for changing account settings

• A function for reporting bugs

How could hackers manipulate TikTok's download link?

• By changing the URL to a fraudulent one

• By sending the link via email

• By deleting the original link

• By encrypting the link

What actions could hackers perform on a user's account?

• Block other users

• Change the user's profile picture

• Send friend requests

• Change video privacy settings

What could hackers do to a user's content feed?

• Share videos with friends

• Like and comment on videos

• Create playlists

• Delete videos and upload unauthorized ones

What sensitive information could hackers retrieve using JavaScript code?

• Location data

• Usernames and passwords

• Browsing history

• Emails, payment information, and birth dates