Reddit disclosed a bug submitted by ahacker1: https://hackerone.com/reports/1656380 – Bounty: $1000 [Source]