U.S. Dept Of Defense disclosed a bug submitted by rook1337: https://hackerone.com/reports/1982630 [Source]