#triage
-
When Username Enumeration Isn't a Vulnerability
A username enumeration report against a public course platform got marked Not Applicable for a simple reason: the usernames were never private to begin with. A look at why context decides whether enumeration is a real bug.