Attackers can Upgrade and claim offer on the Premium Trial Subscription with a total price of IDR0.00 from the original IDR7,022,061.82

High

Submitted None

Team Summary

Official summary from LinkedIn

Reporter found a method to tamper with the premium pricing flow where an attacker could subscribe to LinkedIn Sales Navigator Core offering for free. This issue has been fixed and is now resolved.

Actions:

View on HackerOne

Reported by find_me_here

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Business Logic Errors

Attackers can *Upgrade and claim offer* on the Premium Trial Subscription with a total price of *IDR0.00* from the original *IDR7,022,061.82*