[] Information disclosure due unauthenticated access to APIs and system browser functions

U.S. Dept Of Defense disclosed a bug submitted by unexpectedbuffercon_: https://hackerone.com/reports/2126039