Internet Bug Bounty disclosed a bug submitted by selmelc: https://hackerone.com/reports/2146691 – Bounty: $2540 [Source]