Internet Bug Bounty disclosed a bug submitted by addisoncrump: https://hackerone.com/reports/2094785 – Bounty: $4660 [Source]