8×8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1473071 – Bounty: $777 [Source]