Tennessee Valley Authority disclosed a bug submitted by mohs3n: https://hackerone.com/reports/2214049 [Source]