Tennessee Valley Authority disclosed a bug submitted by mohs3n: https://hackerone.com/reports/2213366 [Source]