I have genuinely no fucking clue how this worked. I was working on a bounty and found an auth bypass via path traversal in one of the endpoints that return customer data. I submitted it and they closed it 2 days later as "informational". I was tired of the bullshit and repeated n/a, duplicate, etc. So I responded with "Since the report was closed as Informative, I wanted to ask whether ******** would be comfortable with me publishing a write-up about this finding for educational purposes. I just want to make sure I have explicit permission before publishing anything related to it." dumbasses finally decided to retriage it as high after that. submitted by /u/MT_Carnage [link] [comments]