Cloudflare Public Bug Bounty disclosed a bug submitted by joshatmotion: https://hackerone.com/reports/1633231 – Bounty: $1000 [Source]