Internet Bug Bounty disclosed a bug submitted by mattaustin: https://hackerone.com/reports/2078581 – Bounty: $3495 [Source]