Internet Bug Bounty disclosed a bug submitted by farcaller: https://hackerone.com/reports/1889161 – Bounty: $8000 [Source]