HackerOne disclosed a bug submitted by xdemiray: https://hackerone.com/reports/2215434 – Bounty: $100 [Source]