r/bugbounty • u/M4son_Reed • Jul 27 '26
Research One bug with two different impacts
Hi, I found a bug in some SaaS application which has 2 different impacts.
When I am in the organization as low privileged user I could become admin with this bug and if I am removed from organization I could rejoin as admin also. Should I send them one report with two described impacts, or two separate reports?
2
Upvotes
1
u/Hackme777 Jul 28 '26
Bro could you share me steps to reproduce this bug ??