Internet Bug Bounty disclosed a bug submitted by fullmetal5: https://hackerone.com/reports/2437050 – Bounty: $560 [Source]