HackerOne disclosed a bug submitted by iamr0000t: https://hackerone.com/reports/1374017 – Bounty: $500 [Source]