HexBrain

LinkedIn · Report #1818969

[ Continuation Report from #1814842 ] Can create articles using other users' NewsLetters

Validstatus
mediumseverity
23upvotes
15 May 2023disclosed

Summary

Security researcher found an IDOR on LinkedIn where the attacker is able to publish articles using Victim's newsletter. This published article is not seen on the Victim's newsletter homepage and there is no notification sent to the subscribers of the victim's newsletter regarding this publication from the attacker.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original