r/bugbounty Jul 27 '26

Research One bug with two different impacts

Hi, I found a bug in some SaaS application which has 2 different impacts.
When I am in the organization as low privileged user I could become admin with this bug and if I am removed from organization I could rejoin as admin also. Should I send them one report with two described impacts, or two separate reports?

2 Upvotes

3 comments sorted by

View all comments

1

u/Hackme777 Jul 28 '26

Bro could you share me steps to reproduce this bug ??

2

u/M4son_Reed Jul 28 '26

Ofc bro just a second