Can access the job name, creator name and can report any draft/under review/rejected job
不安全的直接对象引用 / IDOR / #1581528
该报告还没有中文解读。
原文摘录
摘自原文（2398 字符中的一小部分）
The application has a functionality using which a user can report a job if he found the job is misleading/spam or fraud. Using this feature, an attacker can do report any unlisted (draft/under review/rejected) job. After reporting the job the victim will receive an email from 'LinkedIn Trust & …
原文中的代码
POST /lite/flag-content?contentUrn=urn:li:jobPosting:3086455454&reason=OFFENSIVE&contentSource=JOBS_PREMIUM_OFFLINE&authorProfileId=0&trk=report-content HTTP/2 Host: www.linkedin.com Cookie: XXX User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:100.0) Gecko/20100101 Firefox/100.0 Accept: …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 LinkedIn 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @sachin_kr · 版权归作者与 LinkedIn 所有