Internet Bug Bounty disclosed a bug submitted by jrs53: https://hackerone.com/reports/1773895 – Bounty: $480 [Source]