8×8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1479894 – Bounty: $777 [Source]