Campaign Account Balance and History Disclosed in API Response #1587374 Valid Insecure Direct Object Reference Medium 2022-11-30 – 21 [ Continuation Report from #1814842 ] Can create articles using other users' NewsLetters Analysed #1818969 Valid Insecure Direct Object Reference Medium 2023-05-15 – 23 Anyone can view the results of linkedin skill test -if failed to earn a badge or if the badge earned is kept private: both cases results can be viewed Analysed #1837309 Valid Insecure Direct Object Reference Medium 2023-05-17 – 43 Attackers do not need to Pay for a Subscription to get the `Discussion Group URL` in `Paid Learning` Analysed #1813450 Valid Insecure Direct Object Reference Medium 2023-05-12 – 44 Can access the job name, creator name and can report any draft/under review/rejected job Analysed #1581528 Valid Insecure Direct Object Reference Medium 2022-07-20 – 65 Access to Deactivated LinkedIn Company Pages via Competitor Analytics API Analysed #3604288 Valid Insecure Direct Object Reference Medium 2026-03-24 – 77 Attackers can use TRIAL Premium only by paying **IDR 10,000.00** from the original price of `IDR462,400.00` per month Analysed #1808719 Valid Insecure Direct Object Reference High 2023-08-24 – 84 IDOR to make someone attend or leave an event Analysed #1734639 Valid Insecure Direct Object Reference Medium 2026-03-06 – 87 An attacker can submit arbitrary projects to their service accounts and obtain full information on projects of other users. Analysed #2291999 Valid Insecure Direct Object Reference High 2024-03-12 – 94 IDOR allows an attacker to delete anyone's featured photo. Analysed #1608735 Valid Insecure Direct Object Reference Medium 2023-08-24 – 99 Unauthorized access to resumes stored on LinkedIn Analysed #1777095 Valid Insecure Direct Object Reference High 2022-12-07 – 112 Unauthorized User can View Subscribers of Other Users Newsletters Analysed #1716300 Valid Insecure Direct Object Reference High 2023-03-29 – 117