Internet Bug Bounty disclosed a bug submitted by hunt1: https://hackerone.com/reports/2429894 – Bounty: $4860 [Source]