Capcut Bug Bounty Info

#BugBounty #InfoSec #EthicalHacking #ByteDance

Drop links below. ⬇️

Before I disclose: Is there a private HackerOne/third-party program, or are we going straight to VDP? 👀 capcut bug bounty

We know the parent company (ByteDance) runs bounty programs for TikTok. But what about CapCut? capcut bug bounty

I've found: 🔹 Auth bypass in the web editor 🔹 Insecure direct object references (IDOR) in project files 🔹 Rate-limiting gaps on the mobile API capcut bug bounty

If ByteDance is listening: A clear rewards framework for CapCut would attract top talent before attackers find the low-hanging fruit. 🍍