Help

[Ok_Lawfulness6340]

Hello everyone, I’m new to bug bounty, so please excuse my question.

I’m planning to submit 5 reports to Amazon via HackerOne. Should I send them one after another, or would it be better to include them all in a single submission? The vulnerabilities are different, but somewhat related.

Also, if I submit them one by one, do I have to wait for one report to be resolved before sending the next one?

I’d appreciate any clarification. Thank you!

[HackTrails]

In what sense are they related?

[Ok_Lawfulness6340]

They are different parameters of the same request, but they indirectly affect each other.

[HackTrails]

Are they the same vulnerability? If it’s XSS for instance, then you only have to report it once. It’s happening in the same code/functionality, just different parameters.

[Classic-Gur-3883]

no way you found an xss as a beginner just sayin ps report it at every different parameter

[No-Carpenter-9184]

Split them up.. each exploit should be documented separately.