8×8 Bounty disclosed a bug submitted by ex0dus-0x: https://hackerone.com/reports/1692603 – Bounty: $777 [Source]