Sending SPF and DMARC passing mail as any Gmail or G Suite customer
She reported this issue on April 3rd. Google marked it as a duplicate on April 21st, meaning someone else had already reported it.After it was not fixed, she publicly disclosed the issue and within 7 hours it was patched.What broke in the process at Google? This issue allowed GSuite users to impersonate each other to send email. That is very serious.