U.S. Dept Of Defense disclosed a bug submitted by unexpectedbuffercon_: https://hackerone.com/reports/2126954 [Source]