Legal Robot · Report #260604
Update any profile
Validstatus
14upvotes
16 Aug 2017disclosed
Summary
A security researcher discovered that profile fields (first name, last name, title, company, bio) could be modified by another authenticated user, if the other user had access to the victim's randomly generated user id. Thanks to @samczsun for an excellent and detailed report!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.