Rejected but Rewarded — What a GraphQL Misconfiguration Taught Me About Bug Bounty Triage. (opens in new tab)

Responsible disclosure submitted. No mutations were executed. No systems were harmed. Finding classified as Informative. 50 CHF bonus…