U.S. Dept Of Defense disclosed a bug submitted by angeltsvetkov: https://hackerone.com/reports/1634105 [Source]