Hey everyone, hope youre fine

A few months ago, I reported a vulnerability on Bugcrowd. It was marked as a duplicate of another report involving a different vulnerability.I explained that my finding was unrelated to the other report, but never received an actual response addressing the technical differences. Eventually, my report was marked as Resolved.Later, I retested the issue and confirmed that it was still there, so I reported it again. This time, it was marked as a duplicate of yet another report involving the same endpoint.

The thing is, these are not just two different ways of exploiting the same bug. They involve different code paths, different root causes, and different fixes. The other vulnerability involves a file upload leading to Stored XSS, while mine is related to regex handling and iframe content spoofing.…