Cloudflare Public Bug Bounty disclosed a bug submitted by mattipv4: https://hackerone.com/reports/1724464 – Bounty: $250 [Source]