LinkedIn · Report #2299571
Employee-only Area Bypass
Validstatus
mediumseverity
77upvotes
19 Feb 2024disclosed
Summary
The researcher was able to identify an Improper Access Control issue in the My Company section, which allows an attacker to successfully access the employee-reserved page without being employed by the company itself, leading to information disclosure.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.