When a hacker reports a vulnerability that has already been reported, it's considered a duplicate report. When you mark a report as a duplicate, you can choose between these two options:
Option | Details |
1 | Add the second hacker as an external participant on the original report. |
2 | Don't add the hacker as an external participant on the original report. |
Adding a Hacker to the Original Report
To add the hacker to the original report:
Go to the bottom of the report above the comment box.
Change the action picker to Close report > Duplicate.
Enter the original report number in the Search report field and select the report from the selection list.
A checkbox stating Add hacker name to the original report will show under the Search report field.
Select the checkbox to add the hacker to the report.
Your program decides whether to share the original report with the hacker who submitted the duplicate. We recommend linking the duplicate to the original to ensure accountability and to apply reputation changes to the right hacker.