Research and responsible disclosure
Two anonymised screenshots, a short story for each.
While examining a web service, I documented an access control issue and shared my observations with the relevant team. An earlier report already covered the same issue, so my report was closed as a duplicate.
I reported an issue involving access separation between users. After review, the triage team explained that the issue was already being tracked. My report was therefore closed as a duplicate, as shown in this response.
The masks protect the organisations involved, identifiers and sensitive details.
