Cloudflare Public Bug Bounty disclosed a bug submitted by imtheking: https://hackerone.com/reports/1805779 [Source]