🔬 ATLAS SECURITY LAB

Lab Vulnerabilities

IDOR on Profile Data
GET /api/profile/[userId] — change userId to enumerate any profile
Open Redirect in OAuth
redirect_uri not validated in /oauth/authorize — leads to token leak
CSRF on Follow/Connect
POST /api/connect — no CSRF token, any page can trigger follow
Stored XSS in Bio
Profile bio field renders innerHTML — <img src=x onerror=alert(1)>
Weak Session Token
li_at cookie: predictable Base64 encoding of user:timestamp
Join now

Welcome to your professional community

Software Eng Connect UX Designer 3 LinkedIn
AboutAccessibilityUser AgreementPrivacy PolicyCookie Policy Copyright PolicyBrand PolicyGuest ControlsCommunity Guidelines LinkedIn Corporation © 2026
👤
Atlas Security
Security Researcher | Bug Bounty Hunter
Profile viewers142
Post impressions2,840
Try Premium for free
👤
People you may know
Show more →
LinkedIn News
Saudi Arabia tops tech jobs
4h ago · 12,400 readers
Cybersecurity skills in demand
6h ago · 8,200 readers
Remote work expands in MENA
8h ago · 5,600 readers