Reddit disclosed a bug submitted by revolte: https://hackerone.com/reports/1960765 – Bounty: $6000 [Source]