According to a blog post by Microsoft's Defender 365 research team, the vulnerability would have allowed hackers to hijack users' accounts without their knowledge and modify their TikTok profiles and sensitive information, such as publicizing private videos, sending messages and uploading videos on behalf of users.
In a proof of concept attack, Microsoft researchers were able to create a crafted link that was sent to a TikTok user. Once the targeted user clicked the link, researchers were able to change the TikTok account's bio to read "SECURITY BREACH."
