8×8 Bounty disclosed a bug submitted by exhandler: https://hackerone.com/reports/1877185 – Bounty: $100 [Source]