Cloudflare Public Bug Bounty disclosed a bug submitted by callmed0_4: https://hackerone.com/reports/2043885 [Source]