Internet Bug Bounty disclosed a bug submitted by ranjit_p: https://hackerone.com/reports/2243710 – Bounty: $405 [Source]