U.S. Dept Of Defense disclosed a bug submitted by dishant_singh: https://hackerone.com/reports/2370578 [Source]