CVE-2022-28799

CVE-2022-28799 is a high-severity vulnerability affecting the TikTok Android application (versions prior to 23.7.3). This flaw allows for account takeover through a crafted URL that forces the WebView to load an arbitrary website, enabling an attacker to leverage a JavaScript interface with a single click. The vulnerability has a CVSS score of 8.8 (High), indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, including reports from Microsoft researchers.