HackerOne disclosed a bug submitted by hackit_bharat: https://hackerone.com/reports/2053051 – Bounty: $2500 [Source]