Internet Bug Bounty disclosed a bug submitted by ooooooo_q: https://hackerone.com/reports/1929567 – Bounty: $4000 [Source]