U.S. Department of State disclosed a bug submitted by doosec101: https://hackerone.com/reports/1869184 [Source]