Skip to content
OpenAdvisories

Vendor

Evil0ctal

1 known vulnerabilities.

Products

Douyin_TikTok_Download_API 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85608

    Douyin_TikTok_Download_API 4.1.2 SSRF via url parameter

    Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/video_data endpoints that allows unauthenticated attackers to fetch arbitrary URLs by supplying a url query parameter. Attackers…

    Evil0ctal Douyin_TikTok_Download_API