Privilege Escalation - "Analyst" Role Can View Email Domains of a Company - [GET /voyager/api/voyagerOrganizationDashEmailDomainMappings]
该报告还没有中文解读。
原文摘录
摘自原文（1791 字符中的一小部分）
Summary: Hey team, During the security assessment, I came across an endpoint - `GET /voyager/api/voyagerOrganizationDashEmailDomainMappings`, which is vulnerable to **privilege escalation**. A lower privileged user can abuse this to view the list of approved domains for email verification even …
原文中的代码
GET /voyager/api/voyagerOrganizationDashEmailDomainMappings?decorationId=com.linkedin.voyager.dash.deco.organization.FullOrganizationEmailDomainMapping-2&company=urn%3Ali%3Afsd_company%3A81541206&count=100&q=organization&start=0 HTTP/2 Host: www.linkedin.com User-Agent: Mozilla/5.0 (Macintosh; …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 LinkedIn 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @naaash · 版权归作者与 LinkedIn 所有