Reddit disclosed a bug submitted by dvorakxl: https://hackerone.com/reports/1962645 – Bounty: $5000 [Source]