Internet Bug Bounty disclosed a bug submitted by noentry: https://hackerone.com/reports/2658447 – Bounty: $2142 [Source]