Comment by lucasjans

She reported this issue on April 3rd. Google marked it as a duplicate on April 21st, meaning someone else had already reported it.

After it was not fixed, she publicly disclosed the issue and within 7 hours it was patched.

What broke in the process at Google? This issue allowed GSuite users to impersonate each other to send email. That is very serious.