HexBrain
Open on HackerOneSign in

LinkedIn · Report #2131224

Attackers can *Upgrade and claim offer* on the Premium Trial Subscription with a total price of *IDR0.00* from the original *IDR7,022,061.82*

Validstatus
highseverity
70upvotes
18 Jun 2024disclosed

Summary

Reporter found a method to tamper with the premium pricing flow where an attacker could subscribe to LinkedIn Sales Navigator Core offering for free. This issue has been fixed and is now resolved.

WriteUp:

https://aidilarf.medium.com/part-2-anyone-can-use-unlimited-trial-premium-on-accounts-that-have-used-trial-premium-before-b1ac65c9a2d6

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original