Internet Bug Bounty disclosed a bug submitted by ksw9722: https://hackerone.com/reports/1872682 – Bounty: $2400 [Source]