A 'high severity' TikTok vulnerability allowed one-click account hijacking