Unauthorized User can View Subscribers of Other Users Newsletters Analysed #1716300 Valid Insecure Direct Object Reference High 2023-03-29 – 117 Unauthorized access to resumes stored on LinkedIn Analysed #1777095 Valid Insecure Direct Object Reference High 2022-12-07 – 112 IDOR allows an attacker to delete anyone's featured photo. Analysed #1608735 Valid Insecure Direct Object Reference Medium 2023-08-24 – 99 An attacker can submit arbitrary projects to their service accounts and obtain full information on projects of other users. Analysed #2291999 Valid Insecure Direct Object Reference High 2024-03-12 – 94 IDOR to make someone attend or leave an event Analysed #1734639 Valid Insecure Direct Object Reference Medium 2026-03-06 – 87 Attackers can use TRIAL Premium only by paying **IDR 10,000.00** from the original price of `IDR462,400.00` per month Analysed #1808719 Valid Insecure Direct Object Reference High 2023-08-24 – 84 Access to Deactivated LinkedIn Company Pages via Competitor Analytics API Analysed #3604288 Valid Insecure Direct Object Reference Medium 2026-03-24 – 77 Can access the job name, creator name and can report any draft/under review/rejected job Analysed #1581528 Valid Insecure Direct Object Reference Medium 2022-07-20 – 65 Attackers do not need to Pay for a Subscription to get the `Discussion Group URL` in `Paid Learning` Analysed #1813450 Valid Insecure Direct Object Reference Medium 2023-05-12 – 44 Anyone can view the results of linkedin skill test -if failed to earn a badge or if the badge earned is kept private: both cases results can be viewed Analysed #1837309 Valid Insecure Direct Object Reference Medium 2023-05-17 – 43 [ Continuation Report from #1814842 ] Can create articles using other users' NewsLetters Analysed #1818969 Valid Insecure Direct Object Reference Medium 2023-05-15 – 23 Campaign Account Balance and History Disclosed in API Response Analysed #1587374 Valid Insecure Direct Object Reference Medium 2022-11-30 – 21