The Three Principles of Bug Bounty Duplicates
bugcrowd.com | blog | #bug-bounty | #bugcrowd | #vulnerability-disclosure | #policy | #triage | #program-management | #duplicates | #sqli
Summary
Bugcrowd outlines three principles for judging bug bounty duplicates—touch the code, pay the bug; similar is not the same; many is not systemic—plus triage scenarios like multiple SQLi findings.
- Published
- Collected
--- id: 820 title: "The Three Principles of Bug Bounty Duplicates" source_domain: bugcrowd.com source_url: "https://www.bugcrowd.com/blog/the-three-principles-of-bug-bounty-duplicates/" published_at: "2023-06-29 21:48" tags: ["bug-bounty", "bugcrowd", "vulnerability-disclosure", "policy", "triage", "program-management", "duplicates", "sqli"] phying_url: "https://phying.com/item/820" lang: en --- # The Three Principles of Bug Bounty Duplicates ## Summary Bugcrowd outlines three principles for judging bug bounty duplicates—touch the code, pay the bug; similar is not the same; many is not systemic—plus triage scenarios like multiple SQLi findings. ## Intelligence Metadata - **Sources:** bugcrowd.com - **Published:** 2023-06-29 21:48 - **Original:** https://www.bugcrowd.com/blog/the-three-principles-of-bug-bounty-duplicates/ - **Phying News:** https://phying.com/item/820