A vulnerability in TikTok short-form video-sharing platform could have allowed attackers to easily compile users phone numbers, unique user IDs and other data ripe for phishing attacks. The vulnerability existed in the Find Friends feature of the TikTok mobile app. The most serious vulnerability in the platform could allow attackers to remotely take control over parts of victims TikTok account, such as uploading or deleting videos, and changing settings on videos to make hidden videos public.
Source: https://threatpost.com/tiktok-flaw-phishing-attacks/163322/