U.S. Dept Of Defense disclosed a bug submitted by xandsz: https://hackerone.com/reports/2143411 [Source]