8×8 Bounty disclosed a bug submitted by bababounty99: https://hackerone.com/reports/1354066 – Bounty: $50 [Source]