Triagers review findings individually. When a duplicate classification is applied, we stand by that assessment.
For competitions, escalate during the escalation phase where that process applies.
The canonical (original) finding your submission was marked a duplicate of is not disclosed to researchers.
If you have new proof that your finding is not a duplicate (different root cause, different attack path, or a technical write-up that was not in the original report), you can open a ticket so we can review that with triage. A ticket without new proof might not change the duplicate decision.
When your finding is marked Duplicate, the severity is updated to match the original finding. A higher or lower severity than the one you submitted means it now shows the same severity as the finding it was marked a duplicate of.
Related searches: disagree duplicate, not a duplicate, duplicate appeal, same finding, classification wrong, vulnerability duplicate, severity changed, severity carried over.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article