Vulnerabilities

TI-2022-11424 CVE-2022-28799

The TikTok application before 23.7.3 for Android allows account takeover.

MEDIUM 54

The TikTok application before 23.7.3 for Android allows account takeover.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16034 Published 2022-05-30 No fix listed CWE-425

TI-2019-10670 CVE-2019-14319 · GHSA-9rc8-jhc4-w4c9

LOW 31

The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01073 Published 2019-09-04 No fix listed CWE-319

TI-2017-09739 CVE-2017-13101 · GHSA-wx2p-8rwf-q476

LOW 35

Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2018-08-15 No fix listed CWE-798