Tennessee Valley Authority disclosed a bug submitted by dreamer_eh: https://hackerone.com/reports/1285441 [Source]