U.S. Dept Of Defense disclosed a bug submitted by maskedpersian: https://hackerone.com/reports/1665971 [Source]