Yeah, they probably should have included a POC of the attack on initial submit. That one got patched after the N/A. That's pretty sad. For example, under exa

Yeah, they probably should have included a POC of the attack on initial submit. That one got patched after the N/A. That's pretty sad. For example, under example quality reports, POCs are provided https://hackerone.com/reports/32825 https://hackerone.com/reports/32825 https://docs.hackerone.com/programs/quality-reports.html https://docs.hackerone.com/programs/quality-reports.html