Internet Bug Bounty disclosed a bug submitted by mukeran: https://hackerone.com/reports/2299692 – Bounty: $4660 [Source]