Cloudflare Public Bug Bounty disclosed a bug submitted by suzuka: https://hackerone.com/reports/2122690 – Bounty: $1000 [Source]