Mozilla Critical Services disclosed a bug submitted by r3dpars3c: https://hackerone.com/reports/2111291 [Source]