U.S. Dept Of Defense disclosed a bug submitted by berserkbd47: https://hackerone.com/reports/1626236 – Bounty: $500 [Source]