Reddit disclosed a bug submitted by revolte: https://hackerone.com/reports/1930763 – Bounty: $5000 [Source]