Now-Patched Vulnerability in TikTok Could Have Revealed User Activity and Information

The vulnerability, which has now been fixed, was caused by a window message event handler that does not properly validate the message origin, providing attackers access to sensitive user information.