U.S. Dept Of Defense disclosed a bug submitted by 0xmaruf: https://hackerone.com/reports/2045549 [Source]