Internet Bug Bounty disclosed a bug submitted by czchen: https://hackerone.com/reports/1847140 – Bounty: $2000 [Source]