U.S. Dept Of Defense disclosed a bug submitted by archyxsec: https://hackerone.com/reports/2334420 [Source]