Internet Bug Bounty disclosed a bug submitted by haxatron1: https://hackerone.com/reports/2104566 [Source]