Internet Bug Bounty disclosed a bug submitted by ooooooo_q: https://hackerone.com/reports/2071556 – Bounty: $2540 [Source]