LinkedIn · Report #1818969
[ Continuation Report from #1814842 ] Can create articles using other users' NewsLetters
Validstatus
mediumseverity
23upvotes
15 May 2023disclosed
Summary
Security researcher found an IDOR on LinkedIn where the attacker is able to publish articles using Victim's newsletter. This published article is not seen on the Victim's newsletter homepage and there is no notification sent to the subscribers of the victim's newsletter regarding this publication from the attacker.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.