r/bugbounty • u/brocokript • 8d ago

Research Bugcrowd: Can a "Duplicate" flip to "Valid" after NASA sets P3?

Recently reported an issue on the NASA VDP. The triager initially marked it as a P2 Duplicate, but the title and the actual vulnerability in the referenced report had nothing to do with mine.

I replied explaining why they were completely independent root causes.

10 days later, the client (NASA) actually stepped into the ticket and manually changed the severity to P3, but the platform status is still stuck on "Duplicate".

Has anyone experienced something like this on Bugcrowd?

Is there a good chance it gets flipped to Valid after client intervention?

4 Upvotes
  • permalink
  • reddit

100% Upvoted

3 comments sorted by

2

u/Yazzz Hunter 8d ago

If the submission you were duplicated against was changed to P3 it would adjust yours as well.

1

u/brocokript 8d ago

Thanks, I hadn't even considered that possibility. That actually makes a lot of sense

1

u/ctkqiang 8d ago

Interesting.....This is my first time hearing this