TikTok Awards Nearly $4,000 for Account Takeover Vulnerabilities

Muhammed Taskiran, a 20-year-old researcher based in Germany, informed TikTok in late August that a URL parameter on tiktok.com was “reflecting its value without being properly sanitized.”