U.S. Dept Of Defense disclosed a bug submitted by cdl: https://hackerone.com/reports/1072832 – Bounty: $2250 [Source]