Deny Admin from Editing LinkedIn Company Page using Gen Form Visibility via POST /voyager/api/voyagerOrganizationDashCompanies/{id}

Medium

Submitted None

Team Summary

Official summary from LinkedIn

The researcher found an issue where an attacker could prevent page admins enable/disable Lead gen form in the user's company. This issue has been fixed.

Actions:

View on HackerOne

Reported by domg

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Improper Access Control - Generic