Internet Bug Bounty disclosed a bug submitted by timon8: https://hackerone.com/reports/2390009 – Bounty: $405 [Source]