U.S. Dept Of Defense disclosed a bug submitted by rektile404: https://hackerone.com/reports/1988560 [Source]