Internet Bug Bounty disclosed a bug submitted by ooooooo_q: https://hackerone.com/reports/2438265 – Bounty: $4860 [Source]