Internet Bug Bounty disclosed a bug submitted by timon8: https://hackerone.com/reports/2340833 – Bounty: $540 [Source]