My favourite one that i've seen 4 of 5 iterations of, is people claiming about a privilege escalation or authentication bypass bug, then their reproduction is a

My favourite one that i've seen 4 of 5 iterations of, is people claiming about a privilege escalation or authentication bypass bug, then their reproduction is a convoluted way of doing: 1. Log in with admin credentials 2. Copy the session cookie 3. Run curl command using above session cookie 4. You have bypassed authentication!!